{"report_id":"1f6ab100-65e4-4bc2-942f-a4630b4e3629","version":6,"status":"done","tags":[],"date":"2026-02-17T15:15:30Z","url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"172.67.166.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"title":"claim.moonbirds.com","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"4f8ca59477e6b26d0b89d2dc81f171ea","sha1":"16ca8187d31a6eddab1ecab45c628d1bef2f18f8","sha256":"75d72230d7d69289ef9d7b92563a18e853b1c6fb247f17a76fe4330f513e7d77","sha512":"45158168e9c820a5d8b6741fb5d1f61a6a981d1db31df8e7e8e416608ee820f0177b93d795fddb9813a8e2ba67d8c25f8525e4c485090d7171e4729362965c79","ssdeep":"","tlshash":"e9e026e91c75c83478f4038a20f1e2dc562061a0f711e64492d8dc7a9e11fd34c93948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-02-17T15:15:33.338158Z","last_seen":"2026-02-17T15:15:33.338158Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"172.67.166.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T15:15:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.moonbirds.com","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-03-22","domain_rank":0,"first_seen":"2026-01-30T04:23:47.957524Z","last_seen":"2026-01-30T04:23:47.957524Z","alert_count":0,"request_count":1,"received_data":85055,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim.moonbirdis.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-17T15:14:51.112335Z","last_seen":"2026-02-17T15:14:53.815889Z","alert_count":17,"request_count":17,"received_data":1587778,"sent_data":8820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-09T03:42:01.551155Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"562b87868f26422a97794e3e5010aa31","sha1":"ecf503c8a01e810a6a640cb73d1cddb18a5919cc","sha256":"b2a046c41ae2150a687470cfc2af51ceae13b25680b03f185df8a42712dd2959","sha512":"79686a016dfe03e9f2206ff76becf0518be7a5c819c09d7beb99e14576f2f52c9d06c375c2f21ec614b458e0fc2d2fe905bbb6f312d358dbfa1ea4dd07f12e98","ssdeep":"","tlshash":"1af0ec35a165a6b0566bf22d730fe7c1617144d77201b805389f4f984f2854e42b19c6","size":519,"data":"","first_seen":"2026-01-11T05:27:21.153372Z","last_seen":"2026-03-20T23:22:42.648305Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55428ba45a9a28909943c7ebcf0348a3","sha1":"0a08b6fcfc88bf59a658709ba9af7687815fbe45","sha256":"0360ca6a55a8586a5adaeb004db0906fac661aaf837ee85bcb03fac5732b781d","sha512":"f0ebe802b854d5174126d8575cefb7aa8d3876a42dd93df513dd4b9980c66607df532e03608eaacb62e79360c2d268857034016045310d8e950dfc04930d0756","ssdeep":"12288:r+HiUtPpyIT+5Czkd2OPhfGTbCpt0Z91h4X0Z91h4G0Z91h4LceoCP5Up8yl9NbK:rklcYFBd/BZiGgTgxitkqbuOI","tlshash":"4e8440b6c3f1603547dea255d6f60053adc0e98d8e586cbaa1c4f623f85c732bee4684","size":399170,"data":"","first_seen":"2026-02-17T15:14:57.757121Z","last_seen":"2026-02-17T15:15:33.353921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/postcss-loader.min.js","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f714ae77ab6dbfab7692ff993c3710e1","sha1":"38c7978bf93ad7de931e04cac26eb5076f90e9eb","sha256":"8ee102108ac00a4b5dbb1487388e299b9f9be30e227052c95523ed5443f226f1","sha512":"91cc2abb50cb2c4ee8525a06505815efdfc74d7fd4b460ab0195c4b1abc91e999d31f0c9b80cf130e015d31e881ae8b1e2d135306ba18a594b035215e5a2dc8b","ssdeep":"12288:7V9cAUtPDysN+5Czkd2OPPzGzbCpt0Z91h4T0Z91h4K0Z91h4XeeaCP5Ux8gr9Nh:72cYFBd/jZiGgTuxItkwjqO9","tlshash":"72844eb6c3f1603547dea251d6e60457adc0e48d8e986cbae1c4f627f85c732bee4680","size":406275,"data":"","first_seen":"2026-02-17T15:14:57.751541Z","last_seen":"2026-02-17T15:15:33.339431Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fdac3951ab47d3159bd4411681d5ae4","sha1":"f09de0c075693fe72b1dedf979d455797ecfce1b","sha256":"4a7ea96db3e347a65cd56004628e76d3fce39d95b66307a34207a22291659a69","sha512":"ff2abdd6419c56edde330fd4254fa5fa070da40e38ea6f7405b8be30a32b6d591d9ec9783c5944f7facd275fb0239a299932f126a20f84f9580f36c3d316f7da","ssdeep":"","tlshash":"0bd023691875cc3075e8024a71f6d3d865603090f711e540d1c8cc7bae13dd304b2558","size":217,"data":"","first_seen":"2026-02-17T15:15:33.354848Z","last_seen":"2026-02-17T15:15:33.354848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef3c68a7ced837ccc81a2ee95c0ea14b","sha1":"24a629eb5000b3dfcb2a98f6f9f670e87d79727f","sha256":"8d32a62c947d2250e08d54069ec45ef9d8acc6e25b565be36fe6e2a8595b71ad","sha512":"7151e6ac5bac47c4cf0527869196cbf9ca093707ebb36fd69d07c3884705d387c5f991f514afbefb8807a42acf740b69d06df3363e77750dab9c8b75dd02fc40","ssdeep":"384:rCb26CiUdgCVUdqSZogHYsdl7iWFb1tqTVNGbWzU40r1wku1GQ8NER4MaWtdBkVf:rCb26CiUdgCVG144SzU11pSkVmFv9nYH","tlshash":"23b2a6acfddb78505222b4b10963516bab7f4cc8b006583fd214e7a4bd20f582a6dbf5","size":24514,"data":"","first_seen":"2026-02-17T15:15:24.2062Z","last_seen":"2026-02-17T15:19:43.74212Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplanck.esm.js%3Ft%3D29522355%26u%3DaobBMjy8AOq69XlgGDY5MjU2NDQ4MjhjZmYzYzM0MDI3Y2E0OTMNiGNwv81DhuUIpA","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b60c96ac999c92cf4281695d637a9831","sha1":"f54d4c299097d828bc847cfeafb9708a5de81524","sha256":"19f2a568a193e5e13f9a8e4ae10289bd188fa6f60e7b1fcf00ebe252bc576527","sha512":"8430a8b0017ddaf8d2ed77b56cd3be5dd2085e0cc9c6f523741e048c0f48b7dc6f28105d3e30f14b8aaf69d5b2bf1b964fc398d1a5a0d538b156825da6e1195e","ssdeep":"","tlshash":"b011c0793a2a5534d9d5418b31bee7a93d326061bb02a084d36ccc399d18e8714efcbe","size":902,"data":"","first_seen":"2026-02-17T15:15:33.356167Z","last_seen":"2026-02-17T15:15:33.356167Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.moonbirdis.com/postcss-loader.min.js","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /postcss-loader.min.js HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 4651\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWTJ01HcgkY0X2E4FJ0x%2BeO%2BXfBR8FuqroiMqxtAx5K0BXuuhgsq7CT53V9%2BqaLI41mdZ198%2FLpARz5xC1mqgMDs2ehoHeUKnrL4erY6h7t7v538\"}]}\r\netag: W/\"6991b560-63303\"\r\ncontent-encoding: br\r\ncf-ray: 9cf63d107c1137c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406275,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"f714ae77ab6dbfab7692ff993c3710e1","sha1":"38c7978bf93ad7de931e04cac26eb5076f90e9eb","sha256":"8ee102108ac00a4b5dbb1487388e299b9f9be30e227052c95523ed5443f226f1","sha512":"91cc2abb50cb2c4ee8525a06505815efdfc74d7fd4b460ab0195c4b1abc91e999d31f0c9b80cf130e015d31e881ae8b1e2d135306ba18a594b035215e5a2dc8b","ssdeep":"12288:7V9cAUtPDysN+5Czkd2OPPzGzbCpt0Z91h4T0Z91h4K0Z91h4XeeaCP5Ux8gr9Nh:72cYFBd/jZiGgTuxItkwjqO9","tlshash":"72844eb6c3f1603547dea251d6e60457adc0e48d8e986cbae1c4f627f85c732bee4680","first_seen":"2026-02-17T15:14:57.751541Z","last_seen":"2026-02-17T15:15:33.339431Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/secureproxy?e=ping_proxy","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.moonbirdis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgcYsRvJKC991C2umZfC7FsEIs5azCnSKgfqvgducg77awUC6uLt%2FfUk4ecHwUYrcrmJe29oKFhmb8QpgC0IRRBs%2B%2BunKKoaSmXZqhvLTVfh%2Ff%2F%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cf63d12da2f37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-11T04:51:45.903943Z","times_seen":9028,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/Oscine_Trial_XBd.woff2","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /Oscine_Trial_XBd.woff2 HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/a0c03163657d02d0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 58540\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-e4ac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvScQiLOrmt36qdmcSGoUxuDDMIKKvRU34nChMRsAYT3taAal9FHYsBjf%2BWa3fimKWq%2FnXPZp%2FVuc5%2Ft0cH5E8n5Ba4ghBUahKrn%2FrsCZJEEtJGU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d131ac737c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58540, version 1.0","md5":"d4a87a43708f045f346881c233c0e9fa","sha1":"c9cd2d99e62eaf68aad9262677785dfd6f1c0a1f","sha256":"245148074fae888a7692022cac9f434b1a055b32a42847115429ee02fa8fcf44","sha512":"79349b8a3006dda113b12bf457789416bb1826d059c14659d95c7607b9a842e86532dcfd7bd3cc8e23823091cf3937e04c2c4b03e97bc59e5ef784ec95eca3ae","ssdeep":"1536:4FghklrNNn/pTShOAa1dIFcOqbBRZCb/VrT1xXbX/r:4FoklrNpRcqVOqbjEVX1xXbr","tlshash":"3843028a82aac537edd48a706e97c6613b24dc90d0c736a0611715a0b7d07bcd22fafc","first_seen":"2026-01-30T05:56:59.896578Z","last_seen":"2026-03-04T19:03:33.14626Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T15:15:09.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToR6PQpSTNgeFlhs5PBm1aEg%2B16Fw0f%2BP0HN0HZTcEOxA74v58l7Z%2Bfvown4iM9tT%2F9SrWHrhRz51ZaXMvfYBemCnNAojT6AcdmVr27YWyY7ZMHP\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cf63d0d7a482382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14623,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (13162)","md5":"de189b8a2a027066a357aa14f31e0b06","sha1":"322836e8e29b43b9c090d44a37abef9c2ddaca07","sha256":"3ec16e2a09698334a63979fbb9b24801040b33f519e2fbc3040c156beeec0551","sha512":"5f9b2c5ce19491d20b290f0a43a10a2fa611b1ef8e99311c69db6c52bd43087e4e8b7a53cfce4e707658458c9e1dc742ae46be835db884237df88fa07b657527","ssdeep":"384:BnSL6B5Clm7y8SI3yjurfMkAozoCmsnx/0:UOio7JSI3uurf9vzoCVx/0","tlshash":"2b622939d700023bd99bd2fdade0e95835268552f6434a0e716cb166b3dcce0c4bda4e","first_seen":"2026-02-17T15:15:33.341967Z","last_seen":"2026-02-17T15:15:33.341967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":297,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/css2.css","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/a0c03163657d02d0.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 4650\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6J3VXYvCuihV5%2BfQ5YddYwDlExnAZ%2FuiqMcmlVnvbDYZRHaplyNbMCu12kOM5o0PMCkBvo7oOH5mEtEx30pd%2FUoRrv8SWEEGUnp4N27IbkjZwHWT\"}]}\r\netag: W/\"6991b560-840\"\r\ncontent-encoding: br\r\ncf-ray: 9cf63d10dcde37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94008a89c8d6024db3d861cb7ba4a4f4","sha1":"51705aa43b6b5fe174beb82b06c56178246906ec","sha256":"0a0b13c690f1a1ed9e59cf520667bb9f3d3cee7e8ea89318a03f40ba9b9cf05b","sha512":"e54628d0a2daf050618534f61b4283e15f80ba17123dab3289050740e501a76d9dff62026199c6e2c7df929a7e2d7e3c56b0e22d47a4877dfcd71176264467e0","ssdeep":"","tlshash":"41418b80087ba504d7931cc122ce7e32ee2db19064459d346ffe1498fc5bd59a3b2b4d","first_seen":"2025-01-25T17:56:03.203401Z","last_seen":"2026-08-06T00:00:00.587793Z","times_seen":902,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/Oscine_Trial_Rg.woff2","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /Oscine_Trial_Rg.woff2 HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/a0c03163657d02d0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56020\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-dad4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dZO2nqfH2P%2FQG9%2F3BrGBBeHh9TjjlDAW5pqW2tOf2GhMrkwa%2FDI8jNxRD7LRTnjEmnM1wU1wYAS3ytq8ZmPbpjE6DHuwIwIbD8j3UNZwGD9HJw%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d130ab637c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56020, version 1.0","md5":"f4a7d69390e37be3c8e07333b457004c","sha1":"e022d34d97e22a4a979a08204d4b48e129cd6663","sha256":"c1e49a25661d8acab90823c5be34c79750e0d45b2b8b094f58962f78fb943ce9","sha512":"7cef968728b7d19827ad543068506703de88d006c3a4d7fb6963c4fdb8b8ae7c4899a6552a75dd6b09a60d51e4673c9d7d27955e93d00cc9992576b16bf980ae","ssdeep":"768:Ni0bfc540daZ1hKmQKpphJjI0j1VW3YdgCucobva8viut7DJOKhVXhgsZmi0:NiefZZ19pD00j1V2oWva8vhtOKhVXmW0","tlshash":"0b43f25605c054f8f4d5917aa3a4bdd9c91ba1b0437b08c28a633bd855eb7c8a3387fb","first_seen":"2026-01-30T05:56:59.898958Z","last_seen":"2026-05-31T11:12:46.882896Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cf63d136b8c37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24514,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/logo_bird-home-1.png","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /logo_bird-home-1.png HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11952\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-2eb0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 4651\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DXs4jcDF2bX1U2BNFYCLOyJ9WHIrq4Fzmd9LeRDkzuKJ2IhTIOKOU4%2B2nWet7l2wmyVRjPTxylWK9KPOGCZvIig2ZuQp0kd8L2c1dhZmOS8FOmE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d136b9b37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 148, 8-bit colormap, non-interlaced","md5":"f13114fd994c20030be7ecd242870041","sha1":"18dc87eff270f1dd3f2cbdf049db4d9d75906a30","sha256":"5dc5f6327e915ac5c904e113c7f316f59adc2624021e87c35ee3eebd426b4fa4","sha512":"4642dff77c75590691a5a5a53f92d84485a854126c66cf9855ce42b7c3435d5ea43c4da2e47ed87cb517a5dff42ffe29fca6eed6bfa53a07f162dc895a9b84af","ssdeep":"192:LaSdg4L0o2k14iN+ALAZmJX1cz4q7nRaUckZKrvy7mYTLi1UIq4/ZFlvBzTy:LV021b+ALA+Xiz4fRrvy7HTLi1UIq4/G","tlshash":"2632b0d759f878e278e2429cd75e80f40adabf6ba526c35c24a4c0451f8c1f219ade98","first_seen":"2026-01-30T04:23:55.375642Z","last_seen":"2026-03-04T19:03:33.152508Z","times_seen":83,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:10.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cf63d138bd137c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24514,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24514), with no line terminators","md5":"ef3c68a7ced837ccc81a2ee95c0ea14b","sha1":"24a629eb5000b3dfcb2a98f6f9f670e87d79727f","sha256":"8d32a62c947d2250e08d54069ec45ef9d8acc6e25b565be36fe6e2a8595b71ad","sha512":"7151e6ac5bac47c4cf0527869196cbf9ca093707ebb36fd69d07c3884705d387c5f991f514afbefb8807a42acf740b69d06df3363e77750dab9c8b75dd02fc40","ssdeep":"384:rCb26CiUdgCVUdqSZogHYsdl7iWFb1tqTVNGbWzU40r1wku1GQ8NER4MaWtdBkVf:rCb26CiUdgCVG144SzU11pSkVmFv9nYH","tlshash":"23b2a6acfddb78505222b4b10963516bab7f4cc8b006583fd214e7a4bd20f582a6dbf5","first_seen":"2026-02-17T15:15:24.2062Z","last_seen":"2026-02-17T15:19:43.74212Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.8659395392560625:1771338745:o47TayxyhESgEbbilHPri_VA3z1Y-gEkPuIpaWENLmc/9cf63d0d7a482382","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:10.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.8659395392560625:1771338745:o47TayxyhESgEbbilHPri_VA3z1Y-gEkPuIpaWENLmc/9cf63d0d7a482382 HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12149\r\nOrigin: https://claim.moonbirdis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: Wqsqf0MWj87tnUTk9ug53A==$m1WOyNpU/MxJuw6MZKy0Pg==\r\nset-cookie: cf_clearance=5q_SAWqJUpgqchSsM8sThAc7p7iqIIwL42BilV585DE-1771341310-1.2.1.1-klPjAqu129_Qe17pVZE_aRWKFvwvl0kXvuF6KqN0fY8yY7MNS7bfmesOor1fmbQ8inikQuncmrh7oUbFmf8COjPNIgX4jQmjXnK75_R.h98tzxmh_pHyatwjcrMfIEG0FNhEsvpsmFQyWexTMGwweewGCnPkq7.a9ayUBv4iaT3wtyTzxX.za2AiCB3r4t9yHxyLuJeU7eoVNNHPFmUjDmsCMfbLk8Aa_K_fTS8fqOQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=moonbirdis.com; Expires=Wed, 17 Feb 2027 15:15:10 GMT\r\ntiming-allow-origin: https://claim.moonbirdis.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cf63d14df4837c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/a0c03163657d02d0.css","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /a0c03163657d02d0.css HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 4651\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JUDQKxX%2FKYPvpf6ViVA2B13qJzlw4CMrP1Xyrlv0%2BalUOCFPSxrHzMtosuNGDs0EwEZmT%2BbQCnz%2BQfcVDNT0cw7xc7dGYbfHWCTDKo3ZqAEZNX7\"}]}\r\netag: W/\"6991b560-1217c\"\r\ncontent-encoding: br\r\ncf-ray: 9cf63d107c0437c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74108,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41714)","md5":"7f1e77c027a2b57b4af7d99de8c14c57","sha1":"6aa346b90f2b7d7ac0f08a4c810434c833740d50","sha256":"d4ec859045e940eca7b39b111d28e0f6b73456a5e2615657fd9904b1bc64bd0a","sha512":"7093e1cd36284d411092a231d9dd214cf1eb5f52a2a8e79f629aff3777fc0ebb7ceaba18406b0500e471de517468295669655eac44b3682f958da399e167f118","ssdeep":"1536:uzosn63DKE6Su4wqsI6bJz5xwhAuiy+VK:uzosn63DKE6Su4w3Jz5xwhAuiyj","tlshash":"0c7346097e1c3a3abd1362f581d4a89c610b73caef3d47d7ac9122089fd93e53969714","first_seen":"2026-01-30T04:23:55.372519Z","last_seen":"2026-02-17T15:15:33.347499Z","times_seen":78,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/bg-home.png","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /bg-home.png HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 102126\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-18eee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 4651\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvC23z2b50I23PKpl8%2B1yXV4xYjlX22bAlSxRsxgdPaG7Yr4kLZ5jZ3S8AYcMw4f7PcrNaSmeESjSYXR7MZxnMXXDEDBQvRsQsy%2FMmQsqBc5UKJR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d130a9a37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6000 x 3750, 8-bit/color RGBA, non-interlaced","md5":"4d303c40f300cb64caff7f75a332e69f","sha1":"8c1d660f648c79cf86d40d196bc49e5d78f1e19a","sha256":"f54ed1e62da50259d56ab48cbdb7337eda0ee3d3752a4822b874abb6262518a2","sha512":"fd004ee04c65156b2bbed48984d558dd337c9cdbc88903c6a253eb00a1e779a179a4793e813954ad5cc3f057df0001f8a77201fcc45779376d5e96baaaf516bf","ssdeep":"192:iB3v/e2DU36Tv3r0HlDY1ah0k4uN88CO53lihgome9yqNEA:4//4Kj3r0Hl01EN4st1wLme9yq7","tlshash":"f1a341455a2249e6d41448b29e833ffb7bf946051261db5a9fd4ea7038c31c3e3a39b3","first_seen":"2026-01-30T04:23:55.373348Z","last_seen":"2026-03-04T19:03:33.150144Z","times_seen":84,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/logo-1.png","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /logo-1.png HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2711\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-a97\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 4651\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzSOO973dvNuUJM28iemyO5FLELsJT3ImKV2DhhHrAc6uj3De%2BRVVX6GdyBxnjUx4T78xWqiGKb2m6g5NNRE2eTtfUengHXgNEzn15ARzClWWx5F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d136b9737c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 65, 8-bit colormap, non-interlaced","md5":"814c0b4cfcf15cf383774a8b3435a5eb","sha1":"98ec3d741fb3d554131e82cf9b74fac0f2026bac","sha256":"8c5b1b63b7b922b7fc4063a57110a03e8107bf60b4d41d0fced7345532db31b0","sha512":"05828b28855012a81e872269f472f6950b2376f14b524ffae676ed6bb2b8c0ec761c529c0608f8655a6ad16f75a36682369307725de1e772a891aed085a37df9","ssdeep":"","tlshash":"ef515cf0eb126d9c8d5ef6eac88358555e181c7b83e69ba14e83e2d318a5bc960c50dc","first_seen":"2026-01-30T04:23:55.374729Z","last_seen":"2026-03-04T19:03:33.140376Z","times_seen":83,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/favicon.png","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:10.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 84497\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-14a11\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 4650\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7%2FyH%2F09O2bimW9Z8Ao0NMSK5dqBKsLnBlL22PdQWN4afdt%2BLT%2BYle0XFFe3xq1L6UqIVtRF55htrwRpvkdPRlIhyWxv22ucHclmMQI2OPqiJi3a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d139c1437c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 698 x 626, 8-bit/color RGBA, non-interlaced","md5":"832b2c60fcd953f15828d8369e9b1e50","sha1":"720631529f976c033b099f874f90475065e30969","sha256":"62d94607452a6775fb7643edb97821476c6ab1458632953972a007649eda4749","sha512":"2ad5c906febde346be65504f622d4a4633d3711feba8002ab3f172276dd1fd85f947118ab554c0efbb8b3874ee1d5792be2eb978d2acf064e8784122eb585c9a","ssdeep":"1536:acvst2+Edoyy8tgnv3Cxof+CuUJblB73lw4GOBYQ/kN/z1TrHn3:rILy/anH+RUJblB73l0+YTr3","tlshash":"c68302d73014f5a25ce0247a2d9b23240fd258bd48c1fe7adf8a6d63afd4348e91e0a5","first_seen":"2026-01-30T04:23:55.370675Z","last_seen":"2026-03-04T19:03:33.14177Z","times_seen":83,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplanck.esm.js%3Ft%3D29522355%26u%3DaobBMjy8AOq69XlgGDY5MjU2NDQ4MjhjZmYzYzM0MDI3Y2E0OTMNiGNwv81DhuUIpA","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:10.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplanck.esm.js%3Ft%3D29522355%26u%3DaobBMjy8AOq69XlgGDY5MjU2NDQ4MjhjZmYzYzM0MDI3Y2E0OTMNiGNwv81DhuUIpA HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nCookie: cf_clearance=5q_SAWqJUpgqchSsM8sThAc7p7iqIIwL42BilV585DE-1771341310-1.2.1.1-klPjAqu129_Qe17pVZE_aRWKFvwvl0kXvuF6KqN0fY8yY7MNS7bfmesOor1fmbQ8inikQuncmrh7oUbFmf8COjPNIgX4jQmjXnK75_R.h98tzxmh_pHyatwjcrMfIEG0FNhEsvpsmFQyWexTMGwweewGCnPkq7.a9ayUBv4iaT3wtyTzxX.za2AiCB3r4t9yHxyLuJeU7eoVNNHPFmUjDmsCMfbLk8Aa_K_fTS8fqOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=planck.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/17/2026 15:15:10\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 8ffb67844f76e788409a1b0e904cb7e6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SluHYfEOfLc0cmTCKECFe01l96ZiMcGKlYrzlx4kOwL7VlNFTQhI8KyXXSZUvxe8KXhu81T6KpIuhvidaCC4q7bI1bJ93HKxop14bXML70wQILre\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cf63d15383237c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com/Oscine_Trial_Lt.woff2","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:09.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"GET /Oscine_Trial_Lt.woff2 HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/a0c03163657d02d0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53644\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 12:00:32 GMT\r\netag: \"6991b560-d18c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5SzmSsNJKc6oRrQkuLORDPTlmUbUH8v37jJsdxQvqdqTXnlIVRtJC5WrR7PdjmaCf7jo57ObxYwri6BQxqGuIzsUvpNNDUdBtH%2F6Eond8BJnxOk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf63d131ad237c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53644,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53644, version 1.0","md5":"c1f2e8c63b2d63981e65fdccae1da929","sha1":"3590ea10966fcd0eb24b92b75d5be459b9e568de","sha256":"a64d6bedc689497d04e184904dcfb9fc9584083bc23139f3aa521d14f41f2116","sha512":"3ac96ba18ff625837892d9bfa31d2d575a6c1e85fe418a1e9e6bf810f7e77dd98b17013cbcd1d4e3ac733efb6dd261cd3fd5905f02740ea79ae11d497113e591","ssdeep":"768:7QjQA9C6cXRBlBheHVsjEQBzsk5bui1yE3WHBJHm8cTvIKDz4gb6ylo+lkr:S/cXRboVsN/bui1yIIuzTvHKwFi","tlshash":"ab3302d8fe30a287cb568775d2282ff850e86f26113d9e91336698d24d6ef057263620","first_seen":"2026-01-30T05:56:59.901231Z","last_seen":"2026-03-04T19:03:33.145269Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirds.com/assets/icons/favicon.png","fqdn":"claim.moonbirds.com","domain":"moonbirds.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:10.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.moonbirds.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 10:24:32 GMT","end":"Wed, 29 Apr 2026 10:24:31 GMT"},"fingerprint":{"sha1":"E9:AD:BD:2E:7F:DA:80:91:75:AC:E5:5C:C7:E1:44:B1:4C:71:AF:C4","sha256":"34:2F:08:62:D6:D0:86:D1:83:E4:8C:F5:87:DD:F6:60:5A:8B:04:FE:99:6D:31:13:6D:99:09:6A:C7:0E:57:91"}}},"request":{"raw":"GET /assets/icons/favicon.png HTTP/1.1\r\nHost: claim.moonbirds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.moonbirdis.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16815\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Tue, 17 Feb 2026 15:15:10 GMT\r\netag: \"832b2c60fcd953f15828d8369e9b1e50\"\r\nlast-modified: Tue, 17 Feb 2026 10:34:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/icons/favicon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ghvn4-1771341310049-2cdc876392b6\r\ncontent-length: 84497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 698 x 626, 8-bit/color RGBA, non-interlaced","md5":"832b2c60fcd953f15828d8369e9b1e50","sha1":"720631529f976c033b099f874f90475065e30969","sha256":"62d94607452a6775fb7643edb97821476c6ab1458632953972a007649eda4749","sha512":"2ad5c906febde346be65504f622d4a4633d3711feba8002ab3f172276dd1fd85f947118ab554c0efbb8b3874ee1d5792be2eb978d2acf064e8784122eb585c9a","ssdeep":"1536:acvst2+Edoyy8tgnv3Cxof+CuUJblB73lw4GOBYQ/kN/z1TrHn3:rILy/anH+RUJblB73l0+YTr3","tlshash":"c68302d73014f5a25ce0247a2d9b23240fd258bd48c1fe7adf8a6d63afd4348e91e0a5","first_seen":"2026-01-30T04:23:55.370675Z","last_seen":"2026-03-04T19:03:33.14177Z","times_seen":83,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":18,"receive":11,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirdis.com//secureproxy?s=%2Fjmpd%2F","fqdn":"claim.moonbirdis.com","domain":"moonbirdis.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.moonbirdis.com/","date":"2026-02-17T15:15:11.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirdis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 16:31:30 GMT","end":"Mon, 27 Apr 2026 17:29:52 GMT"},"fingerprint":{"sha1":"4B:A6:FB:7C:69:86:36:6E:52:81:A6:ED:88:0E:D4:5E:64:08:86:DF","sha256":"EC:FD:6B:47:12:BC:4D:5D:29:58:F0:38:D7:18:3B:7A:29:6C:B1:D1:FC:CF:2F:05:19:C9:2A:D4:83:CC:0C:32"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: claim.moonbirdis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.moonbirdis.com/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://claim.moonbirdis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=5q_SAWqJUpgqchSsM8sThAc7p7iqIIwL42BilV585DE-1771341310-1.2.1.1-klPjAqu129_Qe17pVZE_aRWKFvwvl0kXvuF6KqN0fY8yY7MNS7bfmesOor1fmbQ8inikQuncmrh7oUbFmf8COjPNIgX4jQmjXnK75_R.h98tzxmh_pHyatwjcrMfIEG0FNhEsvpsmFQyWexTMGwweewGCnPkq7.a9ayUBv4iaT3wtyTzxX.za2AiCB3r4t9yHxyLuJeU7eoVNNHPFmUjDmsCMfbLk8Aa_K_fTS8fqOQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:15:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e1-1/ZykIQnIUJdKvVpjKDsGZ7Itmg\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771341371668\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/17/2026 15:15:11\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 00ad73f1403062e3404ae6838a8f4895\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uahzMTxSR7KPhn0mC2ZWkkh91acQ%2Bykxeg9ahThMroS4HPfHojwRcQEHEhy5rY5j%2BcnvkeUgOAgBRUCNogXj0kFpkdZ951lNBz3oUr%2FPWRMxoLkE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cf63d1d5bc737c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0351b23487ce7b53917da2708e73aaa","sha1":"d7f67290842721425d2af5698ca0ec199ec8b668","sha256":"5824c51a09b708b14e570aba233249eeb07d7ab8eb29deee340e8ad9ec597c3c","sha512":"84d7041ea218c3367ebe1f70c668279b831e2bed2e0df1a12b5ff82bb01a4ec70f941c47ab55d8f5787a0e98c38da411c9632cd212da02e9f0905907cf6a4797","ssdeep":"","tlshash":"fdd0a7b8bcda26674ee6258a50709a204e1a3951250062aee2803166e58da5470e9ba5","first_seen":"2026-02-17T15:15:33.351417Z","last_seen":"2026-02-17T15:15:33.351417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.moonbirdis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}