{"report_id":"00debc21-656b-4e19-a5ee-dde92b3dae95","version":0,"status":"done","tags":[],"date":"2026-08-12T01:28:43Z","url":{"schema":"http","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"title":"Everything MoonPay Cooked","dom":{"size":170461,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20737)","md5":"a1babb8734ac37244e84d0dc59f78586","sha1":"4e13c6d06c1d5d3a7d25cca0f65a779713f45474","sha256":"70a4b1d7c2c86d9e1016ca4029fe266c12a24fad4fe46b5a15337d7d1126217a","sha512":"2fca1b6c47fb5999debe70982b7bd62b67be77056c6ffa6670048dabefdbf39a1c629e992f9b95316c36f4a4375751984bd0c9e1f0193e3c29fd2e342c14db4d","ssdeep":"1536:iiQs2WTL0tCQwMurrOAFVqeZjvlFOI9CsqTCC5fcr/sxa5hPc43PnK:kwTaU5Jf/D3CQs1","tlshash":"93f3f931d251117bc20b83f8b2a6bba4b3b2510bca12cc6cb67ce7550b5bcdd4b925d9","dom_hash":"domhash3bee2ef0f943d46ef40e9b1f57952365","first_seen":"2026-08-12T01:28:47.031222Z","last_seen":"2026-08-12T01:28:47.031222Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T01:28:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"moonpaycooked.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-07","domain_rank":0,"first_seen":"2026-08-12T01:28:43.302671Z","last_seen":"2026-08-12T01:28:43.302671Z","alert_count":20,"request_count":20,"received_data":516489,"sent_data":10257,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"807ce94313a197c5205b3f68f79c5603","sha1":"f6b3d8c6e2f187dc4c32adc86e80edb91f37526f","sha256":"a70cf05817c1cc34505132ac25e6cb3dbf51784b9d67d500b182634eeed81091","sha512":"59a7e0e4e62464b73083be5494cce2cdf467197f8f368ddb30a55220736867d891b23caa58b4f0570ccb20921ce0ed0db6ef202451337b0005b36f99840622ef","ssdeep":"","tlshash":"4ee07d7b8c82153b425714eebee562847f70e803660dec90bc5db4883f94f464290bd3","size":340,"data":"","first_seen":"2026-08-12T01:28:47.054088Z","last_seen":"2026-08-12T01:28:47.054088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"50429454763b127579933cfb7d72a99f","sha1":"f4bc79dbbb3da60d974ebda718317172ab51593a","sha256":"a65cdf91770d254c2176a3ad35dd7f4d94006c24e38741473131bb8bb2fa9c8b","sha512":"dbabb2a7f27fee136eafc90cd5d90751daec9beea5e938e43cfaf009c6ecd1a36bff1c86fc88228a1b444779a5a635465e842904acc7ceac9159aad2d9cb341d","ssdeep":"192:5cF2EzQl3QaXqKn8PPz9ZUh2yRfXkAmaoLEmrl08:5stz4ePCDRCx","tlshash":"2312638a94f724b145bbb1bc5fafa054363a5063a408ce403d1c8a845f95c65a7fffe8","size":9091,"data":"","first_seen":"2026-08-12T01:28:47.055131Z","last_seen":"2026-08-12T01:28:47.055131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/f51dbf0bfc55eacd/script.js","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-12T04:10:29.577802Z","times_seen":19858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moonpaycooked.com/_astro/Layout.C9VteRbu.css","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.960Z","timestamp":1786498095960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /_astro/Layout.C9VteRbu.css HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"Layout.C9VteRbu.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: W/\"881c177ef230d9cd50bc16e44f62a4bc\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rbg56-1786498095962-939435e8e76a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":45781,"size_decoded":11082,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (45714)","md5":"881c177ef230d9cd50bc16e44f62a4bc","sha1":"fac4c8642dcc75a91f7d8677e0afecfa5ad71a3f","sha256":"7459bb98a555bc42a5aeb3a613d4aac091878d7c9078e2a35fa64ca180b0b195","sha512":"6fe4ee088cd8517149d4b260a35d2df37856bf8d11a4ea6298290ef68b3f3e17af9ea0cc1aceca8a9a3c24f574956020022031d5934e8ce375ab96b035dca730","ssdeep":"384:nkvzen0AGXupMRidsXxvFnSIo8FhsnfX6ZfITrXXdSKgdkGGTT8Nt6cSHkUtD94U:qe0AGX3ZtoMK/TT0KgdkJYNt6cJC","tlshash":"e123c8a1f734d53fbe379ab5b3dcb68c6318b0658d2293a8fa125b050ec76b31446e01","first_seen":"2026-08-12T01:28:47.032859Z","last_seen":"2026-08-12T01:28:47.032859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/award.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.102Z","timestamp":1786498096102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/award.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"award.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"20868b55a744e1a239aea607a4175233\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xffws-1786498096105-4bd22a895118\r\ncontent-length: 365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":365,"size_decoded":963,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20868b55a744e1a239aea607a4175233","sha1":"85ec6b84afbe93b6c7e2235a86445e271b5bebcf","sha256":"f473b53bf49f0004851f3195a31159fff2d402c91e5944921fdb44ab73f0e624","sha512":"72b19e4cba529b2fe86edd33ccefed810921b5fa5de7578f9a20f655b88f01e6493ff1f10f8093578150d36dc7a1b51a0fbfa3dfa48475eb5ea4cd2e986b9064","ssdeep":"","tlshash":"7fe0c6a833280c28fae08300db2c332000bbe0eba34500d626c01cf0202828f3a3bad8","first_seen":"2026-08-12T01:28:47.03418Z","last_seen":"2026-08-12T01:28:47.03418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/brand/moonpay-mark.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.194Z","timestamp":1786498096194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /brand/moonpay-mark.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"moonpay-mark.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"38d0c7fa174711b28c7a6253e153d30c\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvl69-1786498096196-e7a8e75e98cc\r\ncontent-length: 244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":244,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38d0c7fa174711b28c7a6253e153d30c","sha1":"1e241aa0bdd1587c5cc3dbde88407a81eca58309","sha256":"01dce153f742dd099b9d0db76d00f0dbc547e0e356d164b0ece573a62b95d4b2","sha512":"5d0c5b91c8ff6796c0e9139a31bf08ad13d14adf529baf6d1101b4c7de127e756e90daffe0f1cc7c047960edf99111d199a7ac3478ad4c266f924795de161771","ssdeep":"","tlshash":"ded0a754d4bd9d2fcd50842c78ff799ad127d1ce064c0365b8615c1171824b3340b1e8","first_seen":"2026-08-12T01:28:47.03551Z","last_seen":"2026-08-12T01:28:47.03551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T01:28:15.593Z","timestamp":1786498095593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 23792\r\ncache-control: public, max-age=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: W/\"9eabac2df2976496c4fd059a1104a54e\"\r\nlast-modified: Tue, 11 Aug 2026 18:51:43 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6d2qn-1786498095706-a346571a050e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":170121,"size_decoded":21596,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20446)","md5":"9eabac2df2976496c4fd059a1104a54e","sha1":"7e9e4b54676ebc2df890f4e67bfefc0cb0d87fdc","sha256":"95f4f2c97ce0aa4be925d5800b129fa8544193dc4679b69ec3bbef0a0ad3989b","sha512":"25ded8eea52e72abd4adce9ff51024196298b7ba9f368f8c9cd020dcf3870cd07f0a266eb6a4530fb4a8b7885f4b7d6ce96542edfb938f4b96dd4f74e1c278d2","ssdeep":"1536:OiQs2WTL0tpturrOAFVqeZjvlFOK9QshQmI0ScJ+Ixach2c43PnK:IwTaM5JfBZPIFIX","tlshash":"dbf3f931d251117bc20b83f8b2a6bba4b3b2510bca12cc6cb67ce7550b5bcdd4b925d9","first_seen":"2026-08-12T01:28:47.036673Z","last_seen":"2026-08-12T01:28:47.036673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":76,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/fonts/anthropic-sans-roman.woff2","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.957Z","timestamp":1786498095957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /fonts/anthropic-sans-roman.woff2 HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"anthropic-sans-roman.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"c555d9adcafacd26eecf1eef6befa3fa\"\r\nlast-modified: Wed, 12 Aug 2026 01:28:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6d2qn-1786498095960-8ab709ec384b\r\ncontent-length: 103456\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":103456,"size_decoded":104068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 103456, version 26.2818","md5":"c555d9adcafacd26eecf1eef6befa3fa","sha1":"a946c738735b1446d06e6920bd01580d42b9d7ac","sha256":"4b5ca1416daeab7dcb619f6acf8b97a96c185cf8ca7f89c1e07065f6ede6dae8","sha512":"5b9289b0538cdd98fd13f71ab65ef52612d68f7e15e67aea1cc6b3133f1f4c506dc58dbe301dad980322da8e0b0b63e0c2bf68cd3941d56ed61ea5ea6ce7f920","ssdeep":"3072:PfmFCFY9Bppwe+4k8YSRJklFvbUIa5i2r4HKc:PfO9B8eBkhFv6n4HKc","tlshash":"36a312a18a1aad1cf0a5f067505c66a2410defedfa312b8fcfd34caf0586371b567588","first_seen":"2026-08-12T01:28:47.03825Z","last_seen":"2026-08-12T01:28:47.03825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/brand/moonpay-logo.png","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.969Z","timestamp":1786498095969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /brand/moonpay-logo.png HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"moonpay-logo.png\"\r\ncontent-type: image/png\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: \"d42f7c414ced5850bce686ed59bea8f2\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8x6d2-1786498095971-dcb33dd47877\r\ncontent-length: 11329\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11329,"size_decoded":11932,"mime_type":"image/png","magic":"PNG image data, 696 x 210, 8-bit/color RGBA, non-interlaced","md5":"d42f7c414ced5850bce686ed59bea8f2","sha1":"41e435f7563dc9b2ded6f220d47fbd147cc1cd11","sha256":"b1f0df4c601e0d53eea2b8e6c7e0680e5da7f74306253ab7a5c5ee7a6312f9b3","sha512":"d2a2d74cfbdae35041c6f5189d993958d965568ce6c4e7bb8c963e491ca91b56e425b54d328e6595d1ccd7c1300ea89d3c6ef9c78487fd152c1ca38f5eee819c","ssdeep":"192:q6/4Mys/zWnM6VSSp/gQxLoULsB6XZG4v5Erap6IClGp3V+fnFzYhZ1838YtiW6x:q6nys/yMU3zlDoB6X04v96ScN8l83JwR","tlshash":"e132c0ab9f21ba1998cd139cbd4fd3e2ca53708945bb926673468b7a7cc2a011d5cc06","first_seen":"2026-08-12T01:28:47.039376Z","last_seen":"2026-08-12T01:28:47.039376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/source-icons/x.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.972Z","timestamp":1786498095972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /source-icons/x.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"x.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: \"d0b20180fa207aced7f44aef4767adf5\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rbg56-1786498095975-ecbd6255b935\r\ncontent-length: 418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":1012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0b20180fa207aced7f44aef4767adf5","sha1":"e94154bf48d064f42e56a960cb2ac87de636618c","sha256":"15b050831e4bcc902fb8fd879f2d0efac6b086814a6516794fdc3a7a273daa71","sha512":"0802fd289d9875d81ee0c97adb15c09b9478344583cdd4cfad7593ed3ea25ba341c82a456da4523d5399fb01f33da7017d84f5202c1a90e845099970afcf8511","ssdeep":"","tlshash":"e7e023c728100980fc5c4f05b418b0806b33524f327a00b0c6407f24e463e743820d9f","first_seen":"2026-08-12T01:28:47.040865Z","last_seen":"2026-08-12T01:28:47.040865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/f51dbf0bfc55eacd/script.js","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.028Z","timestamp":1786498096028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /f51dbf0bfc55eacd/script.js HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 21843\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: W/\"8e699b6e4471fd6950176e39c5f1ace0\"\r\nlast-modified: Tue, 11 Aug 2026 19:21:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::xffws-1786498096030-77a9fd53977a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2495,"size_decoded":1889,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-12T04:10:29.577802Z","times_seen":19858,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/rocket.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.090Z","timestamp":1786498096090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/rocket.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"rocket.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"bda2652f0df4e564dd69d28828b3be3f\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xffws-1786498096092-cbe0cbc814dc\r\ncontent-length: 516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":516,"size_decoded":1115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bda2652f0df4e564dd69d28828b3be3f","sha1":"7fe933a5e1dc8cf8a6dad0ab5c43b0eeead364b5","sha256":"484eca6b62bb6fb960e37b5d499eafacd7c1954cdcf79e0964f91c2d790669c6","sha512":"e07ff76af649e913fcc3f04f1cc079d98e28f80ad09791ccdd1b150d3609ec24c8250613272835475b95ee3d2cd55e6bb3b73d6318184d1f484172a184551609","ssdeep":"","tlshash":"a2f0276a63180c3cbf314714eb6c3239303b79eba68822605c691470d91819f7e7f6d9","first_seen":"2026-08-12T01:28:47.042588Z","last_seen":"2026-08-12T01:28:47.042588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/globe.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.098Z","timestamp":1786498096098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/globe.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"globe.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"07b696917886480f8d1ef42f5f537ad2\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xffws-1786498096101-d6392a9c5496\r\ncontent-length: 341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":341,"size_decoded":939,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07b696917886480f8d1ef42f5f537ad2","sha1":"af960ce63e26b93e64b0b9ff20325fed6ffea6bf","sha256":"d23740229bf554a7fa966e1a52f79ba201642d5ecb837ea5d3a650658b74b422","sha512":"a5cf00304fe0721d01262af364f06274a0c203e299fc454c563fe83c7cb91b90e3b6547ede1f3f997a6f390bef722724924f624857a988fb269c2667492f0d44","ssdeep":"","tlshash":"b6e0861d661d5839b5a48209eb1a356ca06f56d2c35c9146b9805d309d2c26e39372f8","first_seen":"2026-08-12T01:28:47.043586Z","last_seen":"2026-08-12T01:28:47.043586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/vault.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.100Z","timestamp":1786498096100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/vault.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"vault.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"51e61de0b5e5490b9f3384d03d32c58a\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2l5vc-1786498096103-e5ce92f6ec1c\r\ncontent-length: 492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":492,"size_decoded":1090,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51e61de0b5e5490b9f3384d03d32c58a","sha1":"35747ef3bd8fbe0843774c3264e5e7216d5c6a2a","sha256":"fdf381b4165330ba6e9e71c5566429e03bf242002c7a8c9674e2e3a5e87e7424","sha512":"7f797ed57bd1ec9bb8bc0aef4e3894af937004c98068e998483220c962a621ae1a2b59ac1d63a47980d69baddcb0de583cb64b90f083f41cf1aeed8cdde2db18","ssdeep":"","tlshash":"adf0a769b308982deb60830dd71d719c307ba4dad30d5214b9803935d9182cf7d7b2ed","first_seen":"2026-08-12T01:28:47.044554Z","last_seen":"2026-08-12T01:28:47.044554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/fonts/anthropic-serif-roman.woff2","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.951Z","timestamp":1786498095951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /fonts/anthropic-serif-roman.woff2 HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"anthropic-serif-roman.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: \"f7a0109827079de96686691a110c1820\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jt9ls-1786498095958-79e206dac410\r\ncontent-length: 159368\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":159368,"size_decoded":159984,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 159368, version 26.2818","md5":"f7a0109827079de96686691a110c1820","sha1":"c7ba13a313b88d199f00e6a8a29896d16e055f76","sha256":"262832dfb1c41db38e14eb3dd3ad7b64c25c7483052e676a44e5c7b4e2c5fe33","sha512":"59f714da95e7e9bb40bc2ea4fa5e79b1c5e332b33210472a0792475098f20c7a3c0ed79d5407d8d8410c3b6b52dcf836a7915f3f0068ccd63bc2d27c90adb3e3","ssdeep":"3072:AWYsIT/5Jc3Fxy2S2QaQ5ZlNFLX3Z7wVHIt7Xf1PJG/T7tphaK0lvFuul+7Z1Ppa:AWYh/5zz2AZlfLXps1I1PitolvQulmPo","tlshash":"b0f31220cce66418d039d18df9fe2bc97ef21660487f44a787696c7946743932c89ef8","first_seen":"2026-08-12T01:28:47.045565Z","last_seen":"2026-08-12T01:28:47.045565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/brand/moonpay-mark.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.966Z","timestamp":1786498095966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /brand/moonpay-mark.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"moonpay-mark.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: \"38d0c7fa174711b28c7a6253e153d30c\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rbg56-1786498095968-29f6015ef07b\r\ncontent-length: 244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":244,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38d0c7fa174711b28c7a6253e153d30c","sha1":"1e241aa0bdd1587c5cc3dbde88407a81eca58309","sha256":"01dce153f742dd099b9d0db76d00f0dbc547e0e356d164b0ece573a62b95d4b2","sha512":"5d0c5b91c8ff6796c0e9139a31bf08ad13d14adf529baf6d1101b4c7de127e756e90daffe0f1cc7c047960edf99111d199a7ac3478ad4c266f924795de161771","ssdeep":"","tlshash":"ded0a754d4bd9d2fcd50842c78ff799ad127d1ce064c0365b8615c1171824b3340b1e8","first_seen":"2026-08-12T01:28:47.03551Z","last_seen":"2026-08-12T01:28:47.03551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/source-icons/github.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:15.971Z","timestamp":1786498095971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /source-icons/github.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20113\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"github.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:15 GMT\r\netag: \"501a6a1373a702f6adf725a445c6c6a9\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rbg56-1786498095974-06ea6cc2300a\r\ncontent-length: 939\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":939,"size_decoded":1538,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"501a6a1373a702f6adf725a445c6c6a9","sha1":"72d4bc4dd74e13a90c199da007c02319c8f5ea5f","sha256":"83adf1cacb564250654ccf60caadd8aaf852d9de47936befb7cb61b674ace7e8","sha512":"f49cb76315ce0aa540da7d6ba3768157f902581a9fbc99d28310e52de0a3eca9ff510d5ec13a1818f6c98b0921286847bf79b40fdc2b0492478e13773d916099","ssdeep":"","tlshash":"93117af79fc079c48185e7308b0b89a6375f887d3fc603818198cbb1a9642840a8ac45","first_seen":"2026-03-25T13:35:53.287705Z","last_seen":"2026-08-12T01:28:47.046795Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/spark.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.101Z","timestamp":1786498096101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/spark.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"spark.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"6373a46d6956ba560406135df3fb0f3d\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvl69-1786498096104-72f73dfa8213\r\ncontent-length: 316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316,"size_decoded":914,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6373a46d6956ba560406135df3fb0f3d","sha1":"0b86eb5bb5c18f24cac69b383f38a134d1edd278","sha256":"4fcf5d3fd2df74ad08280f604b2608d0cf0b20e693cb27a648176e4b0672b971","sha512":"208c2f5d37d349e49edf597ac97cb18bdfab891445f542b2ddc4cf02ff3dfbb5b35a4be70bf08f038434487cf60e27746eeef511c2526bea211c7154da68a1a5","ssdeep":"","tlshash":"73e0cdd765ad0d1c7f96c300df6c321920ad54d315410452b6a41574f11d6df6ea7ddc","first_seen":"2026-08-12T01:28:47.047993Z","last_seen":"2026-08-12T01:28:47.047993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/f51dbf0bfc55eacd/view","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.105Z","timestamp":1786498096105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"POST /f51dbf0bfc55eacd/view HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://moonpaycooked.com/\r\nContent-Length: 130\r\nOrigin: https://moonpaycooked.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"o\":\"https://moonpaycooked.com/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/astro\",\"sdkv\":\"2.0.1\",\"ts\":1786498096100,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::pvl69-1786498096109-6846a86e7f31\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":441,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-12T05:00:47.113754Z","times_seen":363226,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/brand/moonpay-apple-touch.png","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.192Z","timestamp":1786498096192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /brand/moonpay-apple-touch.png HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"moonpay-apple-touch.png\"\r\ncontent-type: image/png\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"d0ec9c77d5db1bba11dc513255a50ec4\"\r\nlast-modified: Wed, 12 Aug 2026 01:28:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6d2qn-1786498096194-ac0b7ecaef3c\r\ncontent-length: 7181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7181,"size_decoded":7787,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 180x180, components 3","md5":"d0ec9c77d5db1bba11dc513255a50ec4","sha1":"dd5d6aec8fa581b4e51b618d5e2251b91c8e3d79","sha256":"7aa14c62cf1bfc19f33fa87be82f23de7d6d0d02ca43aec0654f6962eb934a8d","sha512":"ab2b306c1a2b9fed75ee40acab9018428fd3140e4751bd0020cd34f942636206f2be9b52199bf7f07e3220cf36684a99441a6175b2a1a69d44f9f946b4a2bce8","ssdeep":"96:04N2Enxa+U36xKQKHqOY8UBkA00Gp4pNASw6iduxMndsFfiZ2Us7eolGOCZu18sj:ScHoPCf8AkA00OYNASwluxMnMLNuydtV","tlshash":"46e17c375b0453e3cd2c17bf0c23657dda898c9d098117ec5a3384076a887ba8d6da1e","first_seen":"2024-08-20T14:20:19.517989Z","last_seen":"2026-08-12T01:28:47.049509Z","times_seen":5,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/wallet.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.088Z","timestamp":1786498096088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/wallet.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"wallet.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"0a9015a9efadaec6076d6a7bbab007c5\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2l5vc-1786498096090-ec96d6d95fdf\r\ncontent-length: 391\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":391,"size_decoded":990,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9015a9efadaec6076d6a7bbab007c5","sha1":"9a59c4eb6d084a5361ee7df828d465dc116f45a6","sha256":"2b426a4d07e6435b46113bb39a426b2aee9e288714b3004204afece8886b58ed","sha512":"c9ef64b9c0a784c1960fc45b9ad850f0e2abb30cbb6c56536885e2b7bcea696b79a0c8f7ff2600b41c48aa1373e11fde1e1cec7b376a76fe0a42639bd1ee06bc","ssdeep":"","tlshash":"27e0d87d930c482cdb108308e75cb69920b7a0dd5b1d1214b9407935e51d18f6c7f1ee","first_seen":"2026-08-12T01:28:47.050861Z","last_seen":"2026-08-12T01:28:47.050861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/stickers/moon.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.091Z","timestamp":1786498096091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /stickers/moon.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"moon.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"d575589010cc161ef6f3787a60df61b7\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvl69-1786498096095-f44c14b83472\r\ncontent-length: 372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":372,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d575589010cc161ef6f3787a60df61b7","sha1":"e8893a9f213c98f689bc0b6b9e698a06df6738b7","sha256":"e32e031cb35831b9a51ebf330d6a011a42ea782fd050b4f0b512009de39c32b6","sha512":"99d78b8f9f4d8d5634459b08c8fd98f6c5ec25923f25612c09f4c1a1a5416040318465b062385ea21f2c59d0d8c672f5ca5e014e109d9286d05cbf347776450f","ssdeep":"","tlshash":"f7e0df6c931c5c2989a4c00ceb2fb695306ba0d9d70d03947081ad75aa056ab3a2f2f8","first_seen":"2026-08-12T01:28:47.051946Z","last_seen":"2026-08-12T01:28:47.051946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonpaycooked.com/source-icons/news.svg","fqdn":"moonpaycooked.com","domain":"moonpaycooked.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://moonpaycooked.com/","date":"2026-08-12T01:28:16.096Z","timestamp":1786498096096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonpaycooked.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 03:21:21 GMT","end":"Thu, 05 Nov 2026 03:21:20 GMT"},"fingerprint":{"sha1":"32:11:6F:FD:6B:92:2D:A9:93:5C:4C:51:25:3F:C8:12:E7:21:04:08","sha256":"ED:11:29:C5:2B:12:DB:7F:C4:56:24:D1:41:42:7C:91:59:58:89:22:02:A5:7A:48:3C:BC:43:20:4E:B8:C4:A3"}}},"request":{"raw":"GET /source-icons/news.svg HTTP/1.1\r\nHost: moonpaycooked.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moonpaycooked.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20112\r\ncache-control: public, max-age=315360000, immutable\r\ncontent-disposition: inline; filename=\"news.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 12 Aug 2026 01:28:16 GMT\r\netag: \"981ccad6d619370ceb007f0e641d4d7f\"\r\nlast-modified: Tue, 11 Aug 2026 19:53:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2l5vc-1786498096099-e6197f14b991\r\ncontent-length: 285\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":285,"size_decoded":882,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"981ccad6d619370ceb007f0e641d4d7f","sha1":"c08496e011b57e5da3859bcf142a3e5c2c7eb528","sha256":"54d9d6d5da72d9ed9c9a34c9a01824a5aa9682dbbde90fbfef1c5b3897372cfa","sha512":"cd015646a52dc060aff1b9141ad09ff9feeac4fe3a34927ad5def6a46af1289931da2b18aaaf1e1f5bef082a34587c33b6acdcc23cda060d7e27da7a255a945f","ssdeep":"","tlshash":"4ad0c264cb0c1d1ca4264720ef7cf23041ba41a2200e81a8946a1670630635ef97bad0","first_seen":"2026-08-12T01:28:47.052893Z","last_seen":"2026-08-12T01:28:47.052893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"moonpaycooked.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}