{"report_id":"7ce3bafa-a14f-4843-a06c-fff3b9940912","version":6,"status":"done","tags":[],"date":"2026-03-05T13:39:26Z","url":{"schema":"https","addr":"claim.moonbirbsol.xyz/","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"title":"Birb TGE","dom":{"size":14023,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3055)","md5":"1bc8000dccb44d78db34fd2e65ed09f3","sha1":"4cf6ba1b9ff4da284ab37209b633f9c7e0cf398b","sha256":"4307798940873d7d3bd9ee643a81e12ff8141b6bf1ba1e7c918837a26550965d","sha512":"1290bc0364fd478662c84e29d99bfc72382a5a29065ccc73fa62ea6f6c7e253264d2cae359e30addd25a5fc7d5f81cd1525549b42abd4cc25a82170f89eebdbf","ssdeep":"384:01nPaOlC5YJuqF4J8PbX96TmPS5X+Eh4dUm:ySWC564J8Ph0NrE","tlshash":"2c52f8261bbb0875a927a0b67fa687092d62c007c60ac91dbfed12584fd6d84cd773dc","dom_hash":"domhash9d0204b19d702b41439be7f7ebf05f8c","first_seen":"2026-03-05T13:39:32.838012Z","last_seen":"2026-03-05T13:39:32.838012Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T13:39:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.moonbirbsol.xyz","ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-05T13:39:27.098875Z","last_seen":"2026-03-05T13:39:27.098875Z","alert_count":12,"request_count":6,"received_data":1008001,"sent_data":2664,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:srcdoc#197","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"58b4c36f6c94ec6136be9feabad7c758","sha1":"57cdd3c38227883b9145cf668aa3750605d2578a","sha256":"45a73e28e0c17c8a0e5d0d080d6dd023eb0dc9cb54e0885e872fc9c22730dead","sha512":"e47f967d40f43804058256ec7329d0183699714b062a1a2ff9780a02c6d24469f4c57f809bcfe1975a299ed915b639563aa5c5e37228882f089043c93f682e45","ssdeep":"","tlshash":"4b61312aeb7204705bbfa0777b8bc68525301047e941ca5dbebc85940fa1d84abf76cc","size":3208,"data":"","first_seen":"2026-03-05T13:39:32.854692Z","last_seen":"2026-03-05T13:39:32.854692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/static/bootstrap.bundle.min.js","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-18T20:40:17.463751Z","times_seen":21648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T13:39:04.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 13:39:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: frame-ancestors *\r\nx-frame-options: ALLOWALL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJfgAw2rsGo0IQRZUVoEO1qDKoVF3AAYsBFrX4DhhVSlHwFbBs%2FIDvuR4e1j0FVKNQhOtcsIIGFOzjrIJvVJcgCISRLAi5AeJyhKC8%2FT8cJn4a0u1Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d7986510b0adbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":525197,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51188)","md5":"da81cdd20b85623a3dd59d273cc57bcd","sha1":"32134d79d95ad437674fc23a9646af6a014891dd","sha256":"cb0e705bd4577ed1f3b6cb76b035a2d156f83bf8e4940e2a70c8be36c940812a","sha512":"a4187576e11de03d496bf2d3ce428781a8af23977d964a236b59c910c0c9d9adc0632c9648d71f79f8fe0ecb1680743e5d9bb16afbff813f2dd6d38f2cd89ab1","ssdeep":"6144:QIRDnTck0b51/mSOpvV2LqfWIlz6o6FcJZ9RvWbunlSbJb+UksU6FM7pkE8:HFgOpvkQWIlWo6ORSKEbgUksdFap8","tlshash":"51b4d0f214ceb8e59b77cedd81a529c11c18e407472cd4aebece009697cb965ce246f8","first_seen":"2026-03-05T13:39:32.843824Z","last_seen":"2026-03-05T13:39:32.843824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":92,"dns":61,"connect":8,"send":0,"wait":1341,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/favicon.ico","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.moonbirbsol.xyz/","date":"2026-03-05T13:39:06.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T23:45:00.487881Z","times_seen":17963874,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/static/bootstrap.min.css","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.moonbirbsol.xyz/","date":"2026-03-05T13:39:06.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET /static/bootstrap.min.css HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:39:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ANmvUpXuIH%2BTIqcpWY%2BDszE14wpw9Oo4ysRsM1JaOw%2BvI1FqDlkWgIvz9Iyucb05KPuM1nMOPuQzsCY0wWadzOyeoEgL4mZzIloEZvzMQmUEzx6HA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nlast-modified: Mon, 09 Feb 2026 01:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ba2477f34be082aa103ca596e40a6612\"\r\ncf-ray: 9d79865b1b631382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-18T20:09:34.533464Z","times_seen":18936,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/static/bootstrap.bundle.min.js","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.moonbirbsol.xyz/","date":"2026-03-05T13:39:06.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET /static/bootstrap.bundle.min.js HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:39:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnce77rMXGOtOVIoQEF284adxu%2FkV0vB0ts0OlNBNZcmBKuo25z%2B8%2B0UV0ux%2FcKKzZs37oIdCuQK4SHccDDAjvGMSscpZsh%2FIVeJ%2FPnAlRcHVVbz6w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nlast-modified: Mon, 09 Feb 2026 01:53:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d24c217703b35fd667491652943e8afc\"\r\ncf-ray: 9d79865b1b641382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80663,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-18T20:40:17.463751Z","times_seen":21648,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/base_video","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.moonbirbsol.xyz/","date":"2026-03-05T13:39:06.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET /base_video HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:39:06 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1343954\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-disposition: attachment; filename=\"video1.mp4\"\r\nlast-modified: Fri, 20 Feb 2026 12:39:53 GMT\r\netag: \"0354a999b82a7e2cc6824c610b68f7f6\"\r\ncontent-range: bytes 0-1343953/1343954\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2V2hnNbn7Cuaj%2Fv8X%2FrpcmYCkOLNBsH%2B2pHZO%2BiOS9zWpR%2Fmm6RzlYizeyKif82ICOxq1v9c1mIoSjbn2ZU%2FXhjVhYUXu07fiYRlntHFTW1YaFinBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d79865b8b6b1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132345,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"c4b658ad1850e6baca363dc6dd57f810","sha1":"b2688381b8de863f37b12f51fefe339bc952fc16","sha256":"fa4620f977583214ef5c031f9587b6823dd3748938de96b290b44199102e930d","sha512":"95517ce14df7573c49049bc03c5234764ae11653c613eb10b66c3712fd67849dea626b8d7c1722a31e0ca1fa8d4c0d99496044c8f6d46e985a160b9ca6e77173","ssdeep":"3072:nxqP3T94Khi6to51g4Fn8VED1rPbh9s2hnHv6eknYW1:she0o519n8VED17V9BhCeknYW1","tlshash":"34d3121c47f306e2ee7836724d326729b79628b7058e67cb585c40d8f536e15ecf2918","first_seen":"2026-03-05T13:39:32.851443Z","last_seen":"2026-03-05T13:39:32.851443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.moonbirbsol.xyz/base_video","fqdn":"claim.moonbirbsol.xyz","domain":"moonbirbsol.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.moonbirbsol.xyz/","date":"2026-03-05T13:39:06.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbsol.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:59:39 GMT","end":"Sun, 31 May 2026 12:59:38 GMT"},"fingerprint":{"sha1":"31:F1:7A:6A:B7:A2:1F:79:96:4E:90:04:12:08:5B:D2:D2:AE:D7:FB","sha256":"B4:72:1A:C2:62:94:50:6A:AE:FD:01:14:9B:EB:7C:1A:93:F2:9A:49:00:91:AA:00:AE:34:36:75:A5:84:FF:26"}}},"request":{"raw":"GET /base_video HTTP/1.1\r\nHost: claim.moonbirbsol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1310720-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 13:39:06 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 33234\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-disposition: attachment; filename=\"video1.mp4\"\r\nlast-modified: Fri, 20 Feb 2026 12:39:53 GMT\r\netag: \"0354a999b82a7e2cc6824c610b68f7f6\"\r\ncontent-range: bytes 1310720-1343953/1343954\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MKeeZA4ftYAN5HrE4cNSLKVrG0uxe3phXY6XlyaewpN4ksCQgnyWRMKP0kCOSdGiveLTj7tZSb4rfRwqK3lX2RUzQw27%2FMk3LcTMckX5xlDa%2BIe0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d79865bdb6f1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33234,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"03c9d61bc51bbc5fa2dff374a3f03e77","sha1":"51969fb960cdaa83544d33075c830c08d94262bf","sha256":"ce83dfdab0a0813d769b1ecc0e4c86984cbfab69e54ee469987f6bd9e0ddc5a4","sha512":"2848fb2cc9baea23fe91cd0c6b61aab0a15e4af788358be8c6af77c236b9004d40ae66999363a732fa33347757399ac408e016f93d8c07ac0981587f6f95ea68","ssdeep":"384:V2S7bQC41IY4lAuBD3M5W7rvRInSYQYe43tk4IrZ1X/WfhPNBo3LX9x:rvQCSIY4lAuBD3F7sMYe4tkTrzQRo7X7","tlshash":"9ce2f4186bb18546c521167cddf3c724b779eab82253538f5b8c723ebcd63a02e821e5","first_seen":"2026-02-25T19:52:30.588473Z","last_seen":"2026-07-16T02:50:39.338372Z","times_seen":152,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"claim.moonbirbsol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}