{"report_id":"f6caeca1-002c-403c-b99d-72880038db0f","version":6,"status":"done","tags":[],"date":"2026-04-21T18:11:11Z","url":{"schema":"http","addr":"bluebirdmvfls.net","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"104.21.70.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bluebirdmvfls.net/#/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"title":"Bluebird","dom":{"size":6880,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2557)","md5":"9866ec0bc17a32fec40cb002a365e564","sha1":"243aeb93851a0ecd8a41430e88e54ec77c60d52b","sha256":"3c844caf470d82f2cc602334858c51c2a90d7983b54c6d824f7d1bff3c3de590","sha512":"0defe761034294d60a4ba760c3279df6759c118fffd7b33974ec37482bb73c8fa9a4d19adb6f6c232d2c89fec3d58853e72c2a23737f9e308e419c5582b0830e","ssdeep":"96:er858TjprCuj7tFHUCYDAFr6TCZydHRH/9m2mUsGKAiowGhI4TVHdB1nPEPHTPED:eVT7foeZCxfs2nfD3bCSdB1nYzYMfw","tlshash":"a6e156776d64941b23125a17e9f2b808a9e1520b4605a460f0dd01ec9ff5fe2c8dbf35","dom_hash":"domhash4f9aca80f7475ef9b6dbb1e3986cf998","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bluebirdmvfls.net","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"104.21.70.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T18:11:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bluebirdmvfls.net","ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":24,"received_data":3460038,"sent_data":9933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webapi.cxnuzadwhbjju.top","ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":54983,"sent_data":3664,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bluebirdmvfls.net/charting_library/charting_library.min.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-30T14:43:21.572994Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-f5b78a93.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c6416dd6a536e72a4d5fd6554b97bb","sha1":"ffca6f705c373c1ebfa2f383795fe9db126826c9","sha256":"d1c7f13f4e98f9ab679feb4116b4a3c4a6e824c9b49aba6088c8292ef1a720df","sha512":"707cb1393c2df77226ddec4f44f6222818e1a2a00b14a7f1e4bb25a3c60574093ab6dfb8e21ba8d3c730ec00afa18062dfdd5e777761ade9f44cbf98ec9f521b","ssdeep":"1536:EmLPVIi9r0jfPS8ZZoSmRdbWxWpE0cIcaj1Y:nQPTwdbWxy31Y","tlshash":"3cb36c8ea90a0fbf19fd088479574a1021a90f97698ecc9377baae0527fdcd4235d71c","size":115324,"data":"","first_seen":"2026-04-21T18:11:21.152183Z","last_seen":"2026-04-21T18:12:28.834656Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/vendor-ff2ea35d.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d10decc1903bd60ab1f54080c8e15e01","sha1":"ec1ce546c8ccabf1e9742db6db7172d6a2ee9258","sha256":"999c73ec5d84ec7ea41c21fae03c80c63e551ff32cff0fcb3a0218ebd3274bbb","sha512":"390036571ae35946dd05577fcefcf2772adc2f4c9bd46711114f2958a60556e502bfd56d2db0074e67d942987cc92851d95d6fe7dd006ef3506acf6b9bbb465f","ssdeep":"12288:Mv6NLEg6B1uVDwbV7VPUI2X2Y/BDr0A9Os5+BR1V2gYRWdQZEeJa2ne:Mv65Eg1VUh7mIGOs5+dXYRWdQZpa2e","tlshash":"971529c57292f06147ab20e240bb1006f3396e59744e8494f1add8eb7d69d89e2b7f3c","size":880058,"data":"","first_seen":"2025-12-12T09:10:54.048326Z","last_seen":"2026-04-21T18:12:28.874624Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/#/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-30T14:43:21.719316Z","times_seen":3335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/#/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-30T14:43:21.715557Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/#/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-30T14:43:21.718329Z","times_seen":613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06852eec50e4e0defbd9d4aae3c5715c","sha1":"a083367070030ba43ae213a5c73dd633da3c3b40","sha256":"0832ab9b8bc8993800609e4381c4ee293ebf31ce179d9be987aa2de381a78d8b","sha512":"edc218bc027bc30953d53008dd8886cc68b8eae9dced5b185d78693ccc3ba4aadd2ea770bfa2cd716b565a9e09e8095b41d36c31daa029d10fc3e1d2798d459e","ssdeep":"","tlshash":"7611abfe191a702a6303404e976b7801642250bd000a184277cc9e9dbb9ab7dd0cfb8d","size":1048,"data":"","first_seen":"2026-04-21T18:11:21.164453Z","last_seen":"2026-04-21T18:12:28.934991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-30T19:26:26.791361Z","times_seen":32495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-30T19:26:26.791861Z","times_seen":35784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/#/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-30T14:40:49.431074Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/en-7c55c505.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1d083c5ee30924c0754c9294b749586","sha1":"794524ec4cc6394479d3a8de30e8732d06714c4d","sha256":"ae8b18715cd145c983f31cae17ae09a799e5898bc1947607d0dff1f2036539e5","sha512":"3116d9f0818eb1d1f37a762869cfed920a95d1aad376df48627e13e52fdadad8b89f260b8af8344eab0af7b72296dbf9b9638ec1d5db279df7f42fdf4aaf22b7","ssdeep":"768:/GtZcEw/o7rWOdnsihnAMIYrAaAMenroP6+6sPG9w1mwO6fpk7aOLxk:bponWOdnlSYrderLsPWwqLxk","tlshash":"2e13e88a3e16c8ab05f35366b4ce6e2160f909c2c255881f4fedc5fd53e2b566363724","size":43382,"data":"","first_seen":"2026-04-21T18:11:21.15088Z","last_seen":"2026-04-21T18:12:28.893419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/vendor-ff2ea35d.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:53.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/vendor-ff2ea35d.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-d6dba\"\r\nexpires: Wed, 22 Apr 2026 06:10:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQauuYJaT2Gvy%2BXAlc3eav%2FsZS5BrcWltFK7Fizlh286EWaxXzMm4pwSmioEWnJKDGd2IoVJS6UCX8bwnI%2FCSfgcokMCafyTSM0AZqhA9wXGVp%2Fbj4FYNpC8tqaO46M7gO1LkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe591f7e2c35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d10decc1903bd60ab1f54080c8e15e01","sha1":"ec1ce546c8ccabf1e9742db6db7172d6a2ee9258","sha256":"999c73ec5d84ec7ea41c21fae03c80c63e551ff32cff0fcb3a0218ebd3274bbb","sha512":"390036571ae35946dd05577fcefcf2772adc2f4c9bd46711114f2958a60556e502bfd56d2db0074e67d942987cc92851d95d6fe7dd006ef3506acf6b9bbb465f","ssdeep":"12288:Mv6NLEg6B1uVDwbV7VPUI2X2Y/BDr0A9Os5+BR1V2gYRWdQZEeJa2ne:Mv65Eg1VUh7mIGOs5+dXYRWdQZpa2e","tlshash":"971529c57292f06147ab20e240bb1006f3396e59744e8494f1add8eb7d69d89e2b7f3c","first_seen":"2025-12-12T09:10:54.048326Z","last_seen":"2026-04-21T18:12:28.874624Z","times_seen":9,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-c044fd7c.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-c044fd7c.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6999d255-308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTygCgWjv3WlrnkjCVvH3LSTKh2%2B2iZayuWomhtVL0jl2KmueED83v0Xrr%2FGxFyxWizY8OmQui%2BZcxTqK238wA27qWk1nKHUjtBd4OgovhXElC1gy1JBMu4zYoFPXK3dD4AAbA%3D%3D\"}]}\r\ncf-ray: 9efe59200e4735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"106e03d988cbdb024e676f31e28dcfd2","sha1":"eec891557691e23af85eb96d84e442c5c5886184","sha256":"207a8f7075e64c3b1bda85e1eb4d5b0367a90d892ae0da24b7a76de10b218b36","sha512":"d2f075141f3e02a3b8a113d575898402473eca149ff47fcc8f6beddf3dc1eaa3824e9dd44605cab7c48d7f660f7737c8495365c56ad9f99b3e370fd38f4ccb2e","ssdeep":"","tlshash":"fc01bdf9fd1d8ebb0ea20a4142912601140a1fddfa1419f198867d661be4950d7de72d","first_seen":"2025-12-12T09:10:54.116685Z","last_seen":"2026-04-21T18:12:28.868359Z","times_seen":9,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/currencyItem-42943ea0.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/currencyItem-42943ea0.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-509\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9AgDBsDMKBv0K8L5FDO3MwhNdhyNMbZYVBInr2QSUl8TZCOJ5XGMaLvwDUmsOp9cG5odpnnZawp55MWdfPVpZB1VktBNKpRK%2B6AqEhiVsgNjkx6Fuxbj8MLtPaK3TZ6KpPMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59201e4b35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1288)","md5":"07519d203d27bdc2fb4df0822cf70120","sha1":"b718f5384c27861d55363dd95fafd1d875ead0e9","sha256":"b75f9bf83044e7ba9a080edb580a956b40e1367788ae78092f420fad808a78bc","sha512":"054a263c90f0cb895bd7aff91454f03d247284e960ca93e718cb6ac547fed99f7640c4aeb32c861de6086fdabde2d2ed6172912bff80c888873c1c91bc87b6ca","ssdeep":"","tlshash":"8a21ed5aaa01c2f1c7bf846290bc0414524dbbca700189c1beed24a83b8a9bcd338a71","first_seen":"2026-04-21T18:11:21.126547Z","last_seen":"2026-04-21T18:12:28.860636Z","times_seen":2,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/type/defi_activity_type","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:56.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:56 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/filters-06a8ed8e.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/filters-06a8ed8e.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-c1e\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slscXCPAKGq5IC9ffkfRfOBfQS%2BJUGs0ivs78L%2FZhH%2FSB4Wi0R2yDwEyr%2F9%2FzuPskqf0%2Bws5moNxqAjHYF2745mT%2FG8DK%2FbY35C%2Fkbb8nR%2BN94cMLW4L%2BhQzaYXVY6irxXDApQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59200e4935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"d7682c3e976638dbb47e2f67e2a05fdf","sha1":"cfe1fa41c6045e85e35da921be1ae949f52db4f3","sha256":"61b6d828f1fe4f29e62aa7797ecac67cad18bcce14cb5a8a3379576f0a9317fc","sha512":"9a3b77cb728a3b0e2359782911646b7f9ff98412365d06ddd2ec4a68fe70a9dfadbb7d293a2a54d3ba6b8e46166b7d2d6b8ee894eca80b49a2f49e26ed6d581c","ssdeep":"","tlshash":"d55134fdfdd7613356ea6ef944288110728ebe20786e0a49f54bd0455a33888e0bf768","first_seen":"2026-04-21T18:11:21.130528Z","last_seen":"2026-04-21T18:12:28.837527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/getAllSetting","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18545,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (18154), with no line terminators","md5":"67bc9a44893c9d26aa960cb86adb5ae2","sha1":"684eb93dc037ec8d895311649f2c57499bb4ad84","sha256":"e02a0163404fea8a34e80968e226801781760f11c40490b10b2223399272e67c","sha512":"fed1473c9f7e5ce2a31c0ae528831d359942003e00dce204cb82b41e89a89953d4337d033d4dab17b72ef286fbc0e23870342751133ae6ba2ae819d99e5ddd7a","ssdeep":"192:kCznffRMpSpQ+onMjvS+RbTon5+u3H+6hiT3kLWA0uJakik54D6/znF2smXhsLqe:PGQ3ijpLF2pmMzOhX04Y+I8","tlshash":"9382628a33ec9c7da69616c290eb7e4e75ac3577d8d0ec05e5a7ff1c98869304c4b049","first_seen":"2026-04-21T18:11:21.133069Z","last_seen":"2026-04-21T18:12:28.836687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/platform/dev/config.js?1776795054021","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /platform/dev/config.js?1776795054021 HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 11 Jun 2025 07:11:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68492c28-18a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61xVmkQnsKhhOzR1HiLe9QKdymFHekJZ9Mxpc%2Fv4D%2BpgMTLqj395dzj8BXBQik42zX8CDw3PJpA7yuCBpicwtUre%2ByhD3TZqmy%2FzUxAKuew2l4SA270xFsSCSDGIQ0P%2B%2BjoS8A%3D%3D\"}]}\r\ncf-ray: 9efe591fbe3435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-30T14:40:49.405719Z","times_seen":353,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/getAllSetting","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":1401,"timings":{"blocked":576,"dns":74,"connect":246,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/platform/dev/favicon.ico?2.0.1771688533513","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:55.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1771688533513 HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:56 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 23 Jan 2026 15:18:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69739156-a86\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tx9WEEdtCZrbHg%2Fi8cStHfNRFpZl93FtAgMfmA4730n59cT8TNZOPep4A8PMdppLdCD%2F%2FttUgY7YZtLD%2Br3%2BkaXQwqIahR6OI6L7HVDEySv%2BQEuD6FLvCHllx6w8C1vng3ubOg%3D%3D\"}]}\r\ncf-ray: 9efe59286f6235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a14128907dd53f71c99ea545392c46c5","sha1":"ff3e1cfbf9217ac4e32f9d5275834dfeb667c66b","sha256":"e3511e1db380d0cd0e3b4ee29b9f5e47505419c5ebdc39055a69eb35b69661a6","sha512":"e8422cf0d76bc5cfbd6bb59c6a4c8ba176a234c32210708917a0391c9734fde1c6b0824df5562304a6daf15245f45a16c27ae77f032903ad0cd90aff88131826","ssdeep":"","tlshash":"01510bcb0ddba9951da4fe82f9e27e28c8c010b4cb257fa82d1c68f751058c70a69893","first_seen":"2026-04-21T18:11:21.136599Z","last_seen":"2026-04-21T18:12:28.824434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-28dbc377.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-28dbc377.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6999d255-313\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcPopiu4Wri%2BrTfVdmQL4WlO5Q4chdf19YsU0LEAY0PwpzrrH6FhQmLRorUQ5ibJArq%2BnN0jPbdQi9awwipBrpHWWKnb%2Fkei%2FA8TtHUgAtBYMuMO8qbDq7Nt7buawrhAhK2ZiQ%3D%3D\"}]}\r\ncf-ray: 9efe591ffe4035a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (786)","md5":"d487c36c9d77633465ae473a92486c04","sha1":"b4c1fb1348c7750ecc639ec8e6525c3b1e9de47c","sha256":"28dbc377c904a9db1d794629bee1ae78ac393edfccfa1e21823a709f2a03c268","sha512":"d19067f6bf59600ba42221d0e9f8b4c5fa2d363735f81af094824ef763283cf7306ecc69752d667deb6076c7ff67acd60d1391c1cab5245146e14df26722606e","ssdeep":"","tlshash":"45012bdc6f95c7355cb2cdcaee659f8cd1063e52b0ca9cc0e5c31684088fadb1a6517a","first_seen":"2025-12-12T09:10:54.130086Z","last_seen":"2026-04-21T18:12:28.873544Z","times_seen":5,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/currencyItem-15550dda.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-6d6\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hW2Z2ojEUSIgzWnVeu8Z13c0nDPeGtpPHrO5ziMt0RY8baWr03BQUFuL%2FTRD1W9UJHUe4g7REBKgdJcEm5VwwAzPKf%2Bmc1YDqDcoyPOxk80s1I9LL2OTT9VCbwfp8xlNvurfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe591ffe4235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-04-30T10:35:30.769867Z","times_seen":330,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-a3f5ef43.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-a3f5ef43.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6999d255-1c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2lbWW473ZTrHACy8x1mNLCNU8Y7HOSBWxasqGuoA4kdDy1x5qpYSldUz53iiImd2saIQatWaNjiuVTA1fVqJCPHbqwqPjAqogGZxCx%2Fkbc6m3BvQzG6kJUzVIPNA4ZrV7LEUw%3D%3D\"}]}\r\ncf-ray: 9efe59200e4835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (447)","md5":"5022f6f7fce9dfe4eca133d0be111772","sha1":"e43e8a0b3e86eb5b0972f00d457297d9992f0851","sha256":"333fba97ea80fe2d17bd33d270061406f9d97acd2dd114edb69308a3b159cc9b","sha512":"0b113a51f810524c46c0a02cbf51ade35c5da0146941973e42b0ed26ec2ccdbe9ae4eac3611325b29fd7b0b60ed6f3262de1730f440abfef9a96d0c2bfe3edfe","ssdeep":"","tlshash":"62f02b1b3a7694b39be688ed96230861e21817041321c554fd4e4d05a73c5e262ef358","first_seen":"2026-04-21T18:11:21.142436Z","last_seen":"2026-04-21T18:12:28.856927Z","times_seen":2,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cxnuzadwhbjju.top/ws/d7678cb8-a77d-4dd7-bdf6-6c2698114f99","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"GET /ws/d7678cb8-a77d-4dd7-bdf6-6c2698114f99 HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bluebirdmvfls.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: N5LXuIdvQhr4Jx9hMzUpBQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 21 Apr 2026 18:10:55 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bluebirdmvfls.net\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0OsPRVx2rE06C0Yuz+Go/rdvLdI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":2262,"timings":{"blocked":0,"dns":755,"connect":1001,"send":0,"wait":249,"receive":0,"ssl":1004},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/getCoinList","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:55 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31518,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39e998a2887fff84b1b8ff828fd2d1bf","sha1":"ce79d91fa92eb90e2de670eef7e4422f5e2c36ca","sha256":"339fb8df7df17683424005670a5647acd93174c48ba035ec6893fc1563991f0d","sha512":"98cc978cea636012e0e307cad955488bdb1de274441a09ec0eeca256655176bd91bed30c79bcf8ef430665af1d28375c212575c8008f9d2bfecc69fbbe27e07e","ssdeep":"192:XSXyMFXCIy+Xu6+Xt7TXF/UXYZ+XHkmX6F+XIAUXX4+XkWcyXH3nyXTOaXoHUXIV:XcsM49rZ9k/ecUnHrBh1x7BU6aBM","tlshash":"c1e2345a262c99adc57980d05fbf791710cc357fe8c58e0e96da4c8c4eddaf51a0af02","first_seen":"2026-04-21T18:11:21.144284Z","last_seen":"2026-04-21T18:11:21.144284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/navigation-0a2678d1.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/navigation-0a2678d1.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-6ea\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnKpfSr2NjWsv7jwpb4GlhJCtaP7FTIdx1ErdRhWbsCsVIpPHwMPvcL0%2FM6xTyvudtxFIdgSkuxRrFBn34c7mkPhLp10VOzci5xShWcQ2pGlj3j4Z2yK2XBHhTW2S%2FqUHVGqKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe591fee3c35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1769)","md5":"59262177ee955a9808a6f870d70d5b05","sha1":"8992eb17f4bc0e353b38894066346cc619c8db30","sha256":"0a2678d168597af964a5531c61338e24b725f190506eb64d0076b9e0ae2a03b7","sha512":"34cc00836607088d632842a580c36891332f48c99e606a8c9fcec6d6736800950e4df32ac673949c8f6146175a7fc5e427965652d8ea74edee91f205e5a30906","ssdeep":"","tlshash":"0931424df2d822349c7fd6cf7e6403999014be42c983bda5f417c71605cf6e3256429a","first_seen":"2025-12-12T09:10:54.123408Z","last_seen":"2026-04-21T18:12:28.89662Z","times_seen":5,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/charting_library/charting_library.min.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:50.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Jun 2025 07:11:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68492c28-2a6b\"\r\nexpires: Wed, 22 Apr 2026 06:10:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwBBT%2BjPtojly3UFnuroAt6JF5PUO9S4KVKsX8we2NYwapMlZERE%2FaEGwyddZKOsgl7ku4Wcv1otd8hLntv7Xldbyc%2BzBhC1snCNDDnvtWB1au2X8bd%2FToBl6joS85KCfCQwxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe590c7b3435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-30T14:43:21.572994Z","times_seen":929,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/resource/fonts/Arial.ttf","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:52.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bluebirdmvfls.net/assets/index-76897867.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 11 Jun 2025 07:11:36 GMT\r\netag: \"68492c28-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLH1LCUuhYBUtMWvLai2g48SK78xKDO7RKGgqNOE0Ci0xC0seQxXbo2LXUSfpSdgTkpluGJFWoFd8wybi4GdnkaHqaCd8hu0tHpN%2BU74uVZXWFnrCK%2FasokRBnH6zUvOeUJxBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe5914bcf435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-30T14:43:21.631073Z","times_seen":1228,"resource_available":false,"data":null}},"time_used":2420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":805,"receive":1615,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T18:10:49.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:10:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F18bYLvUZ9Y53MLFiqdC%2BBU5nvamIBOjgOA8vmUO3P3xUMKVTTx0A7OjUDZXFMcnOihUl%2Fd3SnDEKAn2mvHIA1jnj%2FXtU9vQlCsB0hKasi31RNDDqwyNdrqzKN6gL7sAQ84X6Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9efe59061d2cdfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"c7e94b123292f8e6f696a6e5c8a82948","sha1":"e0c0260644fd76b52662ce94a2ac3ff7c0053fb2","sha256":"c093bcae1b16ca647781e592ee9e0c964943cd2273386bc7a5fe2deba35f483e","sha512":"a3489e7d687213f4b5834b4524d68d3a7b7596c2693936b90acc11a3f6a2c37dd88e12bf51718c13c94644f1c7979d3b6c76165f46b7a1ea64d77a1cdf00b385","ssdeep":"96:+r82xFf53uSP53FfdDpir6TCZydHRH/gm2mUsGKAiowGwuB1niHTiHsH/2:+FD9P53oZCxfT2nfD3bwuB1niziMf2","tlshash":"f3b154a35da4982b23b1012beee7b41cdb615257851a4814b0cc44ee8ff6fd5c4d7b36","first_seen":"2026-04-21T18:11:21.148237Z","last_seen":"2026-04-21T18:12:28.901014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":48,"dns":25,"connect":1,"send":0,"wait":806,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/vendor-72ef657d.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:50.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-16997\"\r\nexpires: Wed, 22 Apr 2026 06:10:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LInYvrzaNDic1kcujxnCCCPgzBF5bBjz%2FwHu2tG7arwiykMmiuBFSPsLJK%2FpTzVOWRxkRCmmyWS0OzOodZWNX1JrAVXNV8CXh0m1PUPzlHyROzhnIKknqN88Fgnsox3EQ%2B4lBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe590c7b3735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-30T14:42:23.625362Z","times_seen":219,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-bc011be9.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6999d255-18d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmI3qe9hHZV0k6Dc6LgjkpPX07Lpml%2FSrwnxRu4k8Gc8YHP7KKrua2igvsxg%2BtidPf%2FhsoZQDbdmCn3N36R3oBpU8o9zM4LUqfrolcdT30Xe7i9Dn06g%2F3X3Lid7Xe4MeiAaCA%3D%3D\"}]}\r\ncf-ray: 9efe591fee3f35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-30T14:42:23.630284Z","times_seen":648,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/en-7c55c505.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:55.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/en-7c55c505.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-a978\"\r\nexpires: Wed, 22 Apr 2026 06:10:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRoL%2Fy8we8FT98%2FCzoRm2NAoqgMtVap5GQm6J46Ol%2BPGSfe7mmKlgrb7%2Bh9Ejm5%2BYnCxiwQ2kmyk7gGxanZc5%2FQlhcJbWLAL2RHgjbqCk3cPsr9e4cuBmz6%2BQq3w1vxFvR2WuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59271f4c35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43384,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43361)","md5":"a1d083c5ee30924c0754c9294b749586","sha1":"794524ec4cc6394479d3a8de30e8732d06714c4d","sha256":"ae8b18715cd145c983f31cae17ae09a799e5898bc1947607d0dff1f2036539e5","sha512":"3116d9f0818eb1d1f37a762869cfed920a95d1aad376df48627e13e52fdadad8b89f260b8af8344eab0af7b72296dbf9b9638ec1d5db279df7f42fdf4aaf22b7","ssdeep":"768:/GtZcEw/o7rWOdnsihnAMIYrAaAMenroP6+6sPG9w1mwO6fpk7aOLxk:bponWOdnlSYrderLsPWwqLxk","tlshash":"2e13e88a3e16c8ab05f35366b4ce6e2160f909c2c255881f4fedc5fd53e2b566363724","first_seen":"2026-04-21T18:11:21.15088Z","last_seen":"2026-04-21T18:12:28.893419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-f5b78a93.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:50.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-f5b78a93.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-1c27c\"\r\nexpires: Wed, 22 Apr 2026 06:10:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQ4HJjems8CcGVAxEMgUF%2BLbPeumhNDaRAToLWhUnlF0uYkpMDCL4ysiTqC0yGWSJWlZtktAG2GGg7wuvgDQd7JPPf7vfGWhdt8yPuqIfXR1tulgpoAbonI5zXlPOlIJtziv%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe590c7b3635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115324,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"e2c6416dd6a536e72a4d5fd6554b97bb","sha1":"ffca6f705c373c1ebfa2f383795fe9db126826c9","sha256":"d1c7f13f4e98f9ab679feb4116b4a3c4a6e824c9b49aba6088c8292ef1a720df","sha512":"707cb1393c2df77226ddec4f44f6222818e1a2a00b14a7f1e4bb25a3c60574093ab6dfb8e21ba8d3c730ec00afa18062dfdd5e777761ade9f44cbf98ec9f521b","ssdeep":"1536:EmLPVIi9r0jfPS8ZZoSmRdbWxWpE0cIcaj1Y:nQPTwdbWxy31Y","tlshash":"3cb36c8ea90a0fbf19fd088479574a1021a90f97698ecc9377baae0527fdcd4235d71c","first_seen":"2026-04-21T18:11:21.152183Z","last_seen":"2026-04-21T18:12:28.834656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1024,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-76897867.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:50.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-76897867.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-4aae5\"\r\nexpires: Wed, 22 Apr 2026 06:10:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aHRm6HCh%2FHj4U%2BsnDfMfQasHQ3fGkW0a67vWxdzcDzf069QRHAZsBsyJi44LB%2BTuZ%2BumSFM4A%2Br5lWbjZZEwF5A%2F6Ch%2FYV4UVsnPFy6TOs4hnda2YYnNQCC4V03cd5qDeQD%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe590c7b3835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305893,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"c98fa37dcfbd0a8cd1a644cfa027d90c","sha1":"8d7a2c0a7744c1226a3ac450f7a19892cba8f047","sha256":"768978670cc5bf8144d1d766976b4e2bab3961b1a679bc1402d528d2d79963c5","sha512":"5bff6974ce6a71aa053aaaa2438be1d33ab96e25ae249a61fc4bbb5670403fd92ae42d77380f24c5e8ab83f1c16172553da5af579088405e270245123d8c55ea","ssdeep":"6144:nXN/9SpddBmkZ8w71ZACkFDS3vyf58rBeV05Tn:XN/YBTZ8w71ZACkFDS3vyf58rBeV05Tn","tlshash":"f054d8a9a59011bc6f27aa7597ce5ad8f23ce6719c118de8f201600a4fc3ff91363617","first_seen":"2026-04-21T18:11:21.153382Z","last_seen":"2026-04-21T18:12:28.901591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/getCoinList","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":1398,"timings":{"blocked":574,"dns":71,"connect":249,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-2db4c2bc.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-2db4c2bc.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-3aa9\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9b4Yi0KGf2%2BAyy4hnUNer1%2FjLG4agzKXZCRceM3KiGQSjzzIzzAkH8aJisDFSOReNPUutOtbYOlxi22NBvkcCOMafJPBBw7dgUJ%2FwLypqdev9Vj9B0oEnBV5VojAHNAmJ2wV6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59200e4435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15017,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15016)","md5":"8250f77fa1ca090b1305eaf8a9ec46af","sha1":"f77145816821c42d9831b6c23b198d2e8cd83999","sha256":"e6c2d21a29821988b59697f885629d95dc6d91c5e57ece5183725a013a5722ca","sha512":"46d80f8666d2a33a11b697040d60e02f3bccdeec0de303569880d08cc02838ab2993f8119b95fe51babe9843f4b5bd9dad488c8d6935ceede7b526eff2241571","ssdeep":"384:iYSJfU+QA5ATFFBmkfMn6UwT5xTCMKqFi9rnesgPOiC4lK:i9zKJFBmkfMnYXcasgPOiC4k","tlshash":"9562c796f90ada3cf5b7a45140880020761e7fdb500d89e2b8fd6d467b62ebcb74a71c","first_seen":"2026-04-21T18:11:21.154434Z","last_seen":"2026-04-21T18:12:28.818581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-40e2df9c.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-40e2df9c.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-6c9\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhCIY2lHwHe6n%2BFNvIBFXluW88HGH%2BJBUkYsb3Oy7PDr11fN2bndQ6VIy%2BO8h5QljkWWA9e6lRdg7HvUOHXgjdUUEqqxOLTqsAmXEwVSYlurd0%2BiglXtGAtmsxmxZdEtO4iz8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59200e4535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1736)","md5":"231e3e62137eca9d3b49a9ea153eb9b6","sha1":"93a0faaf68bd73cd0577a323c4ac27f6c8ca376f","sha256":"48544fc685544c572e91afb94f46bf1b550fe0412048189f0343c9435b5a58a5","sha512":"acd547bd293d9df8607f3f8b2ad05218968a7ce13a6d82538b0184b24f874700c5c385f969fb99861c384874a1b7446bfd3c7f8eee6d24379a79d56be61debe1","ssdeep":"","tlshash":"e231344df40286bb89b318044448344235591bfe766449b1f1fd69081ff9db6abde315","first_seen":"2026-04-21T18:11:21.155508Z","last_seen":"2026-04-21T18:12:28.879152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/navigation-da57fbfc.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/navigation-da57fbfc.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-c5c\"\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkSu2E%2FsNwb45CYqN0ygyqfkRo4PnLC0tzAmpgIQd1IydWBZZEofw%2BX6W7H9cXSaqmbgp8EhkUSOHS7omgF0tIxlKxiqxOkr0Az6cQYWWlR4F4RPpNqJ%2BQxtgevTxQEjs9fmdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59200e4635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3164,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3157)","md5":"d2ae1fa45d505427b4c91af54547bc73","sha1":"038b200147afce2796e404694198b2e8eb90b278","sha256":"881e399fb129b495a1fc1aa8c76a7ccbf50c997e0c7e578b26a69f08e92577ec","sha512":"90a6ec486007966ff23c7ae23f9101622b1c47285510b71e49e6a740e6b50482e5421f4b491a310a837b51b43ae58d52fb6023cbba8da3905e94e619d4e28cbf","ssdeep":"","tlshash":"d251a75dd802c9b9ea7750559468042152cd3f73b26988e6f6ffd80af338ca9f690325","first_seen":"2026-04-21T18:11:21.156724Z","last_seen":"2026-04-21T18:12:28.895368Z","times_seen":2,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cxnuzadwhbjju.top/api/common/type/defi_activity_type","fqdn":"webapi.cxnuzadwhbjju.top","domain":"cxnuzadwhbjju.top","tld":"top"},"ip":{"addr":"192.238.187.183","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:56.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.cxnuzadwhbjju.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 04:08:28 GMT","end":"Mon, 29 Jun 2026 04:08:27 GMT"},"fingerprint":{"sha1":"F7:01:68:E3:0E:EB:9E:18:31:36:55:D3:25:4A:92:BD:8B:37:66:8C","sha256":"34:C6:27:CA:DF:61:5A:E6:D7:ED:09:9D:4D:FB:8B:56:30:01:A1:AB:4D:66:9C:0A:16:00:B4:4C:6A:0F:24:A3"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.cxnuzadwhbjju.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://bluebirdmvfls.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 18:10:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bluebirdmvfls.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-30T14:43:21.688609Z","times_seen":618,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/vendor-ff2ea35d.js","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:52.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/vendor-ff2ea35d.js HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999d255-d6dba\"\r\nexpires: Wed, 22 Apr 2026 06:10:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8LgnEViksrQIF9RCk4hXro0HH53%2BaOOAl5pbVDRnuptuCXB%2FUVjY2aayCSIbdfcgkYpqCm%2FQI5OtLp%2B%2BmoD6X2w6Q0C85%2BQtrfTIkk%2FtUtiDkxvEsnXahspLjMoKX1aKSoz3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59131c8235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d10decc1903bd60ab1f54080c8e15e01","sha1":"ec1ce546c8ccabf1e9742db6db7172d6a2ee9258","sha256":"999c73ec5d84ec7ea41c21fae03c80c63e551ff32cff0fcb3a0218ebd3274bbb","sha512":"390036571ae35946dd05577fcefcf2772adc2f4c9bd46711114f2958a60556e502bfd56d2db0074e67d942987cc92851d95d6fe7dd006ef3506acf6b9bbb465f","ssdeep":"12288:Mv6NLEg6B1uVDwbV7VPUI2X2Y/BDr0A9Os5+BR1V2gYRWdQZEeJa2ne:Mv65Eg1VUh7mIGOs5+dXYRWdQZpa2e","tlshash":"971529c57292f06147ab20e240bb1006f3396e59744e8494f1add8eb7d69d89e2b7f3c","first_seen":"2025-12-12T09:10:54.048326Z","last_seen":"2026-04-21T18:12:28.874624Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1041,"receive":778,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/assets/index-33acd217.css","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:54.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /assets/index-33acd217.css HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:54 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 21 Feb 2026 15:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:10:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6999d255-3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmnDK8bEdklVGcHvmELfa8sFsB6PALVV5aWxiFxfICN39Q%2BM8mYWa7VC5l1A77C4cSXdd96POS%2F%2B85%2FEu4xUp4VoYGKFVy8EatZ57SoxtrwRVef8olU18F6Y8yrfhWaYsE4B2g%3D%3D\"}]}\r\ncf-ray: 9efe591ffe4135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fae69c2f45a4ef6b923b0395822b90fc","sha1":"15e56c20df99b158876036efef974b73f102e688","sha256":"33acd2173c8e0c625f83972bf4a1212941a1b7666b69975ef0188b874166174f","sha512":"dabd3f7da2b606cc00a5e22d6606ccce506425e986260868ecf4775886b385a52b99d770f0423db3d2b5bfdb0f9dfa57b22797c9e2921b74bdc7cbcf8a821b2b","ssdeep":"","tlshash":"6ba0022d12292514b2624b11ff4be94dce3869179aa18204a7061cd1b5cfa1e275961b","first_seen":"2025-07-18T09:36:58.746195Z","last_seen":"2026-04-21T18:12:28.842515Z","times_seen":18,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bluebirdmvfls.net/platform/dev/logo.png?2.0.1771688533513","fqdn":"bluebirdmvfls.net","domain":"bluebirdmvfls.net","tld":"net"},"ip":{"addr":"172.67.221.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bluebirdmvfls.net/","date":"2026-04-21T18:10:55.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluebirdmvfls.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 09:39:12 GMT","end":"Wed, 15 Jul 2026 10:37:57 GMT"},"fingerprint":{"sha1":"68:D1:F6:E1:E6:BF:23:63:A2:20:49:6A:20:9F:94:AB:8C:6D:FB:8D","sha256":"68:C7:A8:20:A0:42:1B:27:1D:5A:38:97:83:96:2C:BE:5B:55:72:F0:0D:7C:28:DE:D5:D1:42:B4:DB:8C:7B:AD"}}},"request":{"raw":"GET /platform/dev/logo.png?2.0.1771688533513 HTTP/1.1\r\nHost: bluebirdmvfls.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:10:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 15:18:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69739130-6b1d\"\r\nexpires: Thu, 21 May 2026 18:10:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGjd72BYxkwi8EFedwD20Q%2FQZLFSaAzC5ZeCjgY3wFlbNMPeiY%2F4nP2%2ByYxa6Pgr0YQH%2Fpk6%2B3Pnr9u81rXJM%2BOSQCXM7ejZuDSkLdZTMPUGBa9ZVU8PF5%2F%2F4iVh3v0ScvfW9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe59286f6335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27421,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"31bf7148ca6821b587a5305d428b7339","sha1":"0e87490606cfd415e24e62175de08b59945bd698","sha256":"c57a4eaa4bfdc5d8bfe886a02ebc1383f1bb2a6cb59c99a5c9813899f7094c5e","sha512":"b53f7938c5054f9661c43ddad4b077df89abbe39d2fa0e78af37b0215fca2de2eb627553a35b6faff6c4cad4f25556f5bcabe06d5a008d1155f1473884388f0d","ssdeep":"768:KpI/FEAfy5WBzpJnSklJ3SUUlR2/Z4mTC2J:Kpqfy5W35SaJCHwymTD","tlshash":"4bc2b0179304912bc669533482db2b55fe621ab2675f48131387182dbe2ab5c7d2ffc1","first_seen":"2026-04-21T18:11:21.159534Z","last_seen":"2026-04-21T18:12:28.844391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}