{"report_id":"fff951a5-2843-4c3b-a9c0-2e66a1e654a3","version":6,"status":"done","tags":[],"date":"2026-01-28T00:04:29Z","url":{"schema":"http","addr":"moonblrds.ngrok.io","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"moonblrds.ngrok.io/","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"title":"Moonbirds Minting","dom":{"size":2257152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64015)","md5":"5b5e896b5e84e4b3a65c032cabe9b14b","sha1":"1458ea0680f71087a0565f9e187f90ccf0f59c4a","sha256":"738aa32377cb9722960bd36d70f655b97a5fb0672877b78eac1fc355941deb74","sha512":"826a0c077f34fe1c3627bce4689487471961520255584c4638378701da46ebc1998505fdb701b1ab7af2a49625487d81b3e05d9cb02ef07c23b85ce62141b84d","ssdeep":"24576:jSUYlnKKiY98VJpIWpWThUthbqyEGQFraNxgXQRREo8yTp6r1XCeWzXQTCeWzXQf:jSCeWzXQTCeWzXQ1CeWzXQL","tlshash":"aea5b4b5e54899d87b32c00fafd3735cb286f72ce5560c98f26b121c0ec27a90595ead","dom_hash":"domhash029370ae61a266e593c7435cf2f6628f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"moonblrds.ngrok.io","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T00:04:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"moonblrds.ngrok.io","ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-05-25","domain_rank":0,"first_seen":"2026-01-27T23:45:25.972708Z","last_seen":"2026-01-27T23:45:25.972708Z","alert_count":0,"request_count":12,"received_data":4270260,"sent_data":6931,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moonblrds.ngrok.io/apps.js","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bd4e616a1fb3592f5338979068978b6","sha1":"385863401072f7fe690c8a77daca1b9545582635","sha256":"eddab61e62462f60d6729098d621b59522f7bf5febbba06c2faffdb25a2763d2","sha512":"e6d69b977efc3a4c157a000f263d37b8cc689d62a70dafa15e238c76904959800e0061132a95dd5e3945efac7b48876fa3157d4cf225f4fd507e33f0e5a6d623","ssdeep":"12288:5VXraDtYoW6O989okZkEhk4mtCkknrlvf4MOLwI9Bkl69jvFnl7FI06Xv62AdaWf:5VXraDtYoW6O96okZkEhk4mtCkknrlvW","tlshash":"a584060399e6805a42a76db0711b44ebfd6ac78ca2cc3ab5344ce570f4f25ceb16d9b4","size":400357,"data":"","first_seen":"2026-01-27T23:45:28.487304Z","last_seen":"2026-01-28T00:04:31.789179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moonblrds.ngrok.io/","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T00:04:05.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 28 Jan 2026 00:04:05 GMT\r\netag: W/\"22016b-/R0cBLjy29cOKHfF24A6oPvWXEM\"\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nset-cookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc; Path=/; Expires=Thu, 29 Jan 2026 00:04:05 GMT; HttpOnly\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2228587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2228587,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (63984)","md5":"86f2b1858fe8aec00b6b68bda5a43723","sha1":"1c0763294e9c1029a27417a965bd509a54de0a70","sha256":"139e0621b124b4a2c209e8e9f1499d7c68e4c0eb7b44bb3dc7fb45635960d582","sha512":"c41892b5716f5d42dc4388585768a91e77fcc91deea1e9501b98c4d420978c5dbc2ff31c244b4446b39f27658a56429dde78e8cf1d2648c151ebe5a7ba3985ec","ssdeep":"12288:snH+xZ3AXGafUYlnKKiY98VJpIWpWThUthbqyEu:rSUYlnKKiY98VJpIWpWThUthbqyEu","tlshash":"86251bf4e54894dc7b32c00baf87735c7286f36de5660c94f21f222d1ec2ba91195e6a","first_seen":"2026-01-27T23:45:28.479602Z","last_seen":"2026-01-28T00:04:31.783942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":53,"dns":1,"connect":20,"send":0,"wait":363,"receive":202,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/image.png","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"d5fd1-19bf5ee4237\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 876497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":876497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"29346039088de2fda521e6c303e584f9","sha1":"38b9d1ecf802933cb426780512d6a8c686a5aa67","sha256":"600f176d089a466918e96199a79a88752b48aad9c943ee5b921760789430d351","sha512":"776e774eb132e267f32338a54da2e43bca51135da3c2dcd5f52f72d6870920468cd5bda5d806e6e0ca17adc08524c35d665d29180a0c7513334c35bd7becd505","ssdeep":"24576:D0oN1tUlW4gtQQLSab/MT/xyZyy4e8HNs8Aa9HLV:D0o7tYWfXb/aoAy8s8HhV","tlshash":"d8152351f0c42d29019efc30ab223545bb56be3d55e300fdb8edaa05ddbba4ee85290d","first_seen":"2026-01-27T23:45:28.46106Z","last_seen":"2026-01-31T14:37:07.541664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/95f9bdc243432f7892883a4a2a943ac2fb16618d.woff2","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /95f9bdc243432f7892883a4a2a943ac2fb16618d.woff2 HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"4e6fc-19bf5ee41ee\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 321276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":321276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 321276, version 1.0","md5":"0afb55424737bc8e47470fa0aa5ce17b","sha1":"95f9bdc243432f7892883a4a2a943ac2fb16618d","sha256":"c50964d8b7ba5b6989ececf56fa9bf1aeddcd6b397a3239f84d7989c2281cf4b","sha512":"71a21f9d039157a28dec68cdc2ac7b4e32f517e024b176456f0a74ad6818ca9ab770b538a2d83ba6b31afc95dac5dffa3d24bbf090f593b811fa6b0121502c8f","ssdeep":"6144:lONXuBy+L34Ex/30kvIyytX+kpEc5rrp0hUr3JHokmVCPPyd3v4vj4IzTis:w61FvIXX+ONptr5okmSA3v+jhT","tlshash":"84642335be5ac2e2728ab9f0183a376052ecb43ee73b7b672dd5154c5b409149ef3808","first_seen":"2025-03-04T20:46:02.461546Z","last_seen":"2026-07-18T17:18:47.222233Z","times_seen":25,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/c148eba7372293ff175205e5ebff78699f0e876d.png","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /c148eba7372293ff175205e5ebff78699f0e876d.png HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"18d9-19bf5ee4215\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 6361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":6361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 66, 8-bit colormap, non-interlaced","md5":"b155298a66b46da38e9a3275ed0953be","sha1":"c148eba7372293ff175205e5ebff78699f0e876d","sha256":"a649676447f22fdca98f4e25798571cde095b7a60e8702bcf3971c267c8bb001","sha512":"e192a142983d5a42738e65609f438e83bbc14b468cb8d73f46e260696b90827a7c8abb05a1c0517967f85f593030236b08fbc3b2f0b7ab018eb2546546e12802","ssdeep":"192:+bYSOZw++s44nAAbR6n1QWcdqzv7BwWMzcy:+MpZ5LAAbR6nKPEzv7GW4cy","tlshash":"3dd19e214c5e6f1d762086534789fe3c086fc03e5f1f5acfd2a6a952eec212a258614f","first_seen":"2025-11-30T17:23:15.581724Z","last_seen":"2026-02-04T15:45:50.946386Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/c2858262bd342ab7e440117a586fe1f95a3dcfcc.svg","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /c2858262bd342ab7e440117a586fe1f95a3dcfcc.svg HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"126a-19bf5ee422a\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":4714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2c24603ccafa4796d604982fb553818","sha1":"c2858262bd342ab7e440117a586fe1f95a3dcfcc","sha256":"bc2fdc50daedf3ae057ea6299c2e88509be53359fbd718225785bb11c86c45af","sha512":"15431c76141351826316249e5c59bb3e18ea478f3be2ef5a21db3eaf403096373ec1e0a5af4312098dc457d7603afc632837238d1f28a8d7e7419c6a47bb09da","ssdeep":"96:fiS9N5ACUWJyN3FWqIu3jJBqELns884u9yL3BTdc6F:fd5Ap/1WqIu3384vLtmc","tlshash":"67a142e91394a2dce802f3fcd91ba476a51a28ff3b65cbc582a05d5eb51103d0d9ecc5","first_seen":"2025-11-01T14:46:32.097155Z","last_seen":"2026-04-18T09:16:00.242372Z","times_seen":17,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/3c10e62fd82639389e8ca77ed3fb6bd70558abcb.woff2","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /3c10e62fd82639389e8ca77ed3fb6bd70558abcb.woff2 HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"5e264-19bf5ee41a1\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:10 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 385636\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":385636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 385636, version 1.0","md5":"b94a0c1ffbabdefbc6ff34592609e30e","sha1":"3c10e62fd82639389e8ca77ed3fb6bd70558abcb","sha256":"90bf775eb57e8d45ad4158f6f8f2f343d02b308aa13dc5c266d3fe13a0cd5658","sha512":"eca160a3a801b659f882221f97a9576ec3763ae0e9a5e7ae6ecd3b6da367335916e5c40cea954fb7737f26ceb8a14928e48b9778032d1c68e15a5d2be63c5c58","ssdeep":"6144:twSB3GzByzcwt5lhE/qy88JI60XJ8r5ZtuQtoJf981mhxCju5wUkZNwg+qYjkPx9:twZyDlIqyjOXKr5ZcRJ3gZN4qYjkPf","tlshash":"548423b614f1814df5233913a9adc72c22d6afb44b257ce76c17d64039e1bb02b8fa60","first_seen":"2024-12-25T01:37:08.284557Z","last_seen":"2026-07-18T17:18:47.272167Z","times_seen":87,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"moonblrds.ngrok.io/","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"18.192.31.165","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://moonblrds.ngrok.io\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9vt7lzaLxmVut0kBuMWNyA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc; PHPSESSID=gpilv16u88entmbkmr7849hqa8\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nSec-Websocket-Accept: kj1iyGFK137WGx/NiXWIaKzAcxw=\r\nSec-Websocket-Extensions: permessage-deflate\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:26:20.993676Z","times_seen":17562036,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":1,"connect":20,"send":0,"wait":29,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/apps.js","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /apps.js HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: application/javascript\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"61be5-19bd6e5c33f\"\r\nlast-modified: Mon, 19 Jan 2026 15:35:40 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 400357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":400357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0bd4e616a1fb3592f5338979068978b6","sha1":"385863401072f7fe690c8a77daca1b9545582635","sha256":"eddab61e62462f60d6729098d621b59522f7bf5febbba06c2faffdb25a2763d2","sha512":"e6d69b977efc3a4c157a000f263d37b8cc689d62a70dafa15e238c76904959800e0061132a95dd5e3945efac7b48876fa3157d4cf225f4fd507e33f0e5a6d623","ssdeep":"12288:5VXraDtYoW6O989okZkEhk4mtCkknrlvf4MOLwI9Bkl69jvFnl7FI06Xv62AdaWf:5VXraDtYoW6O96okZkEhk4mtCkknrlvW","tlshash":"a584060399e6805a42a76db0711b44ebfd6ac78ca2cc3ab5344ce570f4f25ceb16d9b4","first_seen":"2026-01-27T23:45:28.487304Z","last_seen":"2026-01-28T00:04:31.789179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/4e0642481c3d036c0442137e595ddc545bb447d2.svg","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /4e0642481c3d036c0442137e595ddc545bb447d2.svg HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"7f4-19bf5ee41d4\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:10 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2036,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f1ac2fadfe0ad82eb1ec4751f07a7a7","sha1":"4e0642481c3d036c0442137e595ddc545bb447d2","sha256":"e94d593631e8cea414d409811b8fe362aeaa6b582d85a6af5044849b2896f129","sha512":"483d1fadd672ca85b4ac155c4e50fa66650b22a7d5513e2fcf504d98892d90d388a46cc67e24d48f56d97379f93d27c55f2910f4f5eeed216c1267442f3741bb","ssdeep":"","tlshash":"0741347bb19d98a2d306c3acda664034117e66739e87c71cc2e0fe7e28340d90c2e9d8","first_seen":"2026-01-27T23:45:28.470392Z","last_seen":"2026-01-28T00:04:31.789998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/c1ec10773d2e5a617d5581a26ad4b65436ca85c4.woff2","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /c1ec10773d2e5a617d5581a26ad4b65436ca85c4.woff2 HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"9118-19bf5ee421e\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 37144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":37144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37144, version 1.0","md5":"6161f5491d9d0c0daac49eb1bbaa041d","sha1":"c1ec10773d2e5a617d5581a26ad4b65436ca85c4","sha256":"56ed19e76b19b70ef4eea83f63b7ef91c4e46ed5977973995a8227e5b9197d15","sha512":"114d496eb7d49a763b687659f234d235c2ac952628727fbaddb9572623cc487125354cd9d607487a4aade0135e10b5375eba1997749985f1b19ab89950550950","ssdeep":"768:lG7MFZITQ8eZV6M+xF+rxiUyvPsUxgLkcesFoMy3Pb5UOP/FUHZZN:lG4ZoQ8nPiiUuRRPtUY/Fo7N","tlshash":"1bf2f19fbb0d169ed2604a36b3134cccb274d7ce64ee443db590468b98f524939f22d9","first_seen":"2024-12-25T01:37:08.303524Z","last_seen":"2026-07-24T15:38:05.261588Z","times_seen":150,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/a5895089ddca796751e6cc4a073c38a9abc01f4e.png","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /a5895089ddca796751e6cc4a073c38a9abc01f4e.png HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonblrds.ngrok.io/\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\netag: W/\"82e-19bf5ee420c\"\r\nlast-modified: Sun, 25 Jan 2026 16:13:11 GMT\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: Express\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"11878af3475912ffee92fff835f397e7","sha1":"a5895089ddca796751e6cc4a073c38a9abc01f4e","sha256":"13359f80e10bb3a324e798e8b5651c945ad5c91d05bb6e3ed405f68ea3adb407","sha512":"bab4b3cdb719fcb649fd8fab0949d6810acb5eb595e315a8ce879d6f52cbdd713e94c382b100f638021d579c00ba8a25ca8e668e0cb8aa44d49b08a6d4fb53de","ssdeep":"","tlshash":"41411afa810d46ed412d82057a897205ffbadc0b7946f9c5758c8fe0cab666c96f90c8","first_seen":"2025-11-30T17:23:15.571416Z","last_seen":"2026-02-04T15:45:50.949012Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonblrds.ngrok.io/risk_checker/browserID?browserID=ss","fqdn":"moonblrds.ngrok.io","domain":"moonblrds.ngrok.io","tld":"ngrok.io"},"ip":{"addr":"3.124.142.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moonblrds.ngrok.io/","date":"2026-01-28T00:04:06.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ngrok.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 00:02:29 GMT","end":"Thu, 12 Mar 2026 00:02:28 GMT"},"fingerprint":{"sha1":"A9:CF:EC:E2:B4:D1:2A:1B:4E:E9:75:4E:D8:2D:60:A5:45:CD:11:51","sha256":"DF:8E:DD:66:40:BE:52:00:E1:30:37:0E:F6:EF:64:C2:DE:BB:31:0A:70:AC:00:36:B1:D5:85:F1:82:95:7A:E1"}}},"request":{"raw":"GET /risk_checker/browserID?browserID=ss HTTP/1.1\r\nHost: moonblrds.ngrok.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moonblrds.ngrok.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AbhoJUpLOFuN1MBgwVmZEz0VkFTGOSF0C.GZZ9cm5oWpmVEW3LINhLYNCZTXRYAXPbSTFPlxNAfpc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: \r\naccess-control-max-age: 3600\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-location: browserID.php\r\ncontent-type: application/json\r\ndate: Wed, 28 Jan 2026 00:04:06 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: Apache/2.4.62 (Win64) OpenSSL/3.1.7 PHP/8.3.14 mod_fcgid/2.3.10-dev\r\nset-cookie: PHPSESSID=gpilv16u88entmbkmr7849hqa8; path=/; secure; HttpOnly; SameSite=None\r\ntcn: choice\r\nvary: negotiate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-powered-by: PHP/7.4.33\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.1.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":34,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c7cb855822d76a10e596f169f5cba15b","sha1":"97142a9f110fb75b0e73b7d4f135dbc0805e9e61","sha256":"49a5fc202752a4d6bc8403c0af560d0c91db1f372d524072531cc93378e8e1fd","sha512":"33b96b64c96d56d3e10a3e5b1705eb8df3dff36c19386d0aaaca7ad5007e8ecf9c053911c896705b7abd01c6fbdcd878b8f916caad3e588cbe65ba9a0c919cb3","ssdeep":"","tlshash":"9b800002000c0020a8a00e28000838202fab8ea3082b02a20aeeaea02f080c0a2a822c","first_seen":"2026-01-28T00:04:31.794174Z","last_seen":"2026-01-28T00:04:31.794174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}