{"report_id":"1de0563c-03ed-42ac-bad7-2708ba315ff1","version":6,"status":"done","tags":[],"date":"2026-01-24T13:52:37Z","url":{"schema":"https","addr":"mooonshot.net","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"title":"Moonshot vote - All Chains","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"81d01e105893e5f5800d010eda1bcd83","sha1":"b474f14a64fc701c2a0658644539c736857d9b97","sha256":"ea7df61eb80740723c2263be6996112483b9f6eef34d452285b1155c4f7c54cd","sha512":"8b439e9e2984b5211d5cf33e9a19791278bf245f8e28590c21ae6ae6201dae931cb00d32d1b2aea768a252e0e4c37db4db9620a55e74fa54bec54e57c6ae64ea","ssdeep":"","tlshash":"01e026ea6c6ac83478f4178a60f5e39c1a6461a0b711e64482d9dc6b9e10fd34ca395c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mooonshot.net","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:52:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mooonshot.net","ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-23","domain_rank":0,"first_seen":"2026-01-02T13:08:14.915308Z","last_seen":"2026-01-02T13:08:14.915308Z","alert_count":12,"request_count":12,"received_data":1261919,"sent_data":6256,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-18T23:20:15.877736Z","alert_count":0,"request_count":1,"received_data":161801,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdaa76810d224d443f0ec5a7d99cf99f","sha1":"2fa39b4e825af9b9d3be3d13b1e63d7fb198038f","sha256":"782ef68042210ff9eaff5066883a2f4f0ab90ea1c6971e873ec7c9ddbdbd4a26","sha512":"2c0490f386f9eefa68430a525391326da7e9054931ceeb3ea2e4585b9b388f2fd291cbec537c7087b92a134592a33f23873b1320dcc120e72bd3776771444431","ssdeep":"","tlshash":"07e0c29c01a522712058821afa8a9c30eb66555b4d00b8157fdcc2ad8f6d38fa8e33ca","size":335,"data":"","first_seen":"2026-01-02T13:08:19.249965Z","last_seen":"2026-01-24T13:52:48.5952Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/dust.lite.min.js","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f32507e31d57247342cc6eb7bd6a4335","sha1":"d7444848313b7b1212323b740f859bf120aeff01","sha256":"1327fb38679e73fdbd11dd5478b35b738b51db683907e68468f48b7bfc091edf","sha512":"f75abd0348c931bcf236dd8911ab2131260df3f63b23631d0418b49c77608fbb919c5a05e3ab15ee76c01070d51c024e1f4e7bf013a3939511981d91f72bddd1","ssdeep":"6144:qxzxQh0usxQh0u+uGEV99pPFAV99pPFQV99pPFeZ1SrC67i9x1j7YJv+mctgtL/6:q8V9PtAV9PtQV9Ptei5h6","tlshash":"d7a453ba1b8ce187877190e6b66e218d9c4373311edd787fe3acf58be100856b1d16a1","size":480633,"data":"","first_seen":"2026-01-02T13:08:19.239781Z","last_seen":"2026-01-24T13:52:48.578513Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ce5983b17f8d07d2f452d2c4af0b632","sha1":"1988d57723f38517d1fe128b87194cce963b0be6","sha256":"19cc72375c0e3ee8e7d078d171a584f040294bc09c08bfb075a931d575fb314b","sha512":"4ff557ba625a2902eeec72f70b73456b99fe8baa59e616ca5172109f4d65b64c35bf250ef686a9992945758484257ed29f0711b3fa62e8e357262b92624ab1fe","ssdeep":"6144:aRnxQh0uwxQh0u+uiw3M3w3sP/SzYgL+N1B9YJv+We/K/9BDxJQEsZx:aw3M3w3syrNA","tlshash":"a1a465b52b9df1838bb1d0e7b66e22499c03bb311b9e787ee36cf507e000456b1d65a1","size":463706,"data":"","first_seen":"2026-01-02T13:08:19.253422Z","last_seen":"2026-01-24T13:52:48.602486Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fe53b8232f84d560a179e5b795c8131","sha1":"0b4aaacf5c75cd658bac91d020fb1fa80ba575df","sha256":"d063fd1f0203cc49f041397ce06a1ec35180f73ee313239bc326087ef82acbc6","sha512":"2b4919fe27e42cdc262a4faf31ca55a1819ea678955b87953f5eb56ba232ce879d08f96450c5c09a519f1f318f0bae26aeef431326605f37f5d4b9fa5e6c26a1","ssdeep":"","tlshash":"959004451413d07101f411414343f334f50000140051fc555cccd17c7c017070d4c1d3","size":43,"data":"","first_seen":"2026-01-02T13:08:19.25081Z","last_seen":"2026-01-24T13:52:48.598845Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ea0fbc84715688419f380e9235f788","sha1":"225615ebd4b7784bea8e2cfef974e8cb26e58d2b","sha256":"4f139f32edd81d65d09270149956e95ac2d810b7f0acd13ae475daaa379d4a5c","sha512":"a9d4db402bb65b6549342c0cdb162208a28742840c9d7131fcabfbf35b627417fbcda1cfd91cab4281756aba350591e8aeb878a2a89ef84b3fcddba8ccf45a61","ssdeep":"384:WAhP/6jcumoNbZYmvMd9spLL3G904MCZxwfnvutd6YLARfaVYf+7EcNUiwqs:WEHsczoNbZYmUPQL3GC4QdLmwci1","tlshash":"75c2a7e666b63015018358960e4b82013214f583be8fec657f6cc5c06f9af69edb3bd9","size":27510,"data":"","first_seen":"2026-01-02T13:08:19.251659Z","last_seen":"2026-01-24T13:52:48.601584Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6265e0fdfc33469d7a2685ef9dbe1d90","sha1":"f92f15fb1910349904d5f42408e8d32dc1c2f5b2","sha256":"54e9620f4bb734040cbc05d32f9bb6ac9f79e65a71f7a3ea6be2640df4be0f78","sha512":"aee566c3ec5d6828c29db678d354089adf54dc9a29af93ca6d511258de842404cf908c6025b0766101ef9a7ce60236daa600bb7d00f6086405dbdf29ef351370","ssdeep":"3072:wPlRCBLG+dlL4lui/StxAww9r9bjoO4zm0LF6Q8TRhjXR6B6ahA+:wPbChGAL4lstxAwwnbjoOAm0LF6TTTjw","tlshash":"03f3b6927692f46203f186fa04760402f31a7989398b856cb17ddddb3c9dc8e71b9bb4","size":160941,"data":"","first_seen":"2026-01-02T13:08:19.242513Z","last_seen":"2026-07-15T01:43:33.72319Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9988fcaf0074115e3b5a6c76b3be5b2c","sha1":"bc5d33ac82906aa72326d793597d6342696107cb","sha256":"199989080a52a23a100e9f811e17505a8173b08e329c501b84034a48e639ee1b","sha512":"caf81c3b8b39fe59ec9ef859f2af77d706aa84fc27d09916846e7a279864a1d3fe421575df10bc36e1ec9584bbbd2bc9db05742e14ab3882b80cbcfa3f2a1506","ssdeep":"","tlshash":"8e11c0b53a1a5534d9d5418b31bee7a93e3260617b02a184c3accc295d18e8714efcbe","size":902,"data":"","first_seen":"2026-01-24T13:52:39.056271Z","last_seen":"2026-01-24T13:52:39.056271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"47d74a5dcb790a67ecdc02ebe43cacc6","sha1":"427df172a999416f9a8c2cc9f583317eeb013055","sha256":"7c6bf6fd92a0f326268222db2a03d8552b88181fb167bfb818710fb584bcb5f1","sha512":"a68693f0ba10ccf11c70b8c7f9e9f70831b13087123ae257399be3da472f952ad694b127b20fb4ec094eb7668925ff1b8e4a2369c8176b41bea5fae33023fc8d","ssdeep":"","tlshash":"c5d023d538758c3075d8024a60f5e3e827602050b711e240c2cdcc1f7e11ed304b395c","size":217,"data":"","first_seen":"2026-01-24T13:52:39.058524Z","last_seen":"2026-01-24T13:52:39.058524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c663c54e6cc60920d9a8da59997d213f","sha1":"4a12225d3e4680e05923a9b00822b2acfec1404a","sha256":"63c2939e2d39b839ba16bf2522b7bced3a20123cf1b2d1140e6b296c4cdf0836","sha512":"95366fa5823d5ae0ac07efdd76045c76508089bef509a9c632c80f2fa03e9c896d8f0104ff023874593c464944679c173a69407a09e79bf38f8b194140921659","ssdeep":"384:l1pEauOzM+5//fbmi7HU0dv1V9I5pXbQEJ+9Zk5clBwpG:NExa95nTRnv1jCwZkEKpG","tlshash":"6892d7ce3ec9f05d9269683111ff38ebb75d9ed874484a00d292e8e87c6077c8666e5c","size":20802,"data":"","first_seen":"2026-01-24T13:42:44.340239Z","last_seen":"2026-01-24T14:19:36.35Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpm2.min.js%3Ft%3D29487712%26u%3Dh0F4pbBpopkeVcj3GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZTAyMzG3NU8Sp6iunonOIQ","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mooonshot.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpm2.min.js%3Ft%3D29487712%26u%3Dh0F4pbBpopkeVcj3GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZTAyMzG3NU8Sp6iunonOIQ","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:17.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fpm2.min.js%3Ft%3D29487712%26u%3Dh0F4pbBpopkeVcj3GDY5MjU2NDRlMjhjZmYzYzM0MDI3ZTAyMzG3NU8Sp6iunonOIQ HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nCookie: cf_clearance=TzZ07Nb6miUgy5Nr.aqSzV7r6AuqvVKcipbFuJZ.lF4-1769262737-1.2.1.1-7bjUVWTjONXeUEO4F6.rcpnqSGbiap0GI3yLwvD571Azwxyztt6hD0EHpjBQ6rW0a8_MFpyNBmliRsFsyVR88NKy4Akfs1Ie3klNEIlPex4kmAAvVAgAC_y2wCl95SlAS8Is.uvik49FmuQlZX06Kztq8DRusQcFMrqYEL0x1z1MJVLbI1fZMAkx9VppRJPeYMEBnM3IPF0FWN71kmFDGQdNAwB651ER7YKb9A_jtv8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=pm2.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:52:17\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 16a0ff813446640aca23350e6004cbcd\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=524Sk7Ckf4ZYqo3WqrYGXg6cFcsYy4ZxeR1LfpYKWlf%2F0n%2FDbgCux0YSLVAAjMgkv4WfOhgnV57paxryQFRdJHrHGvOrTMKAE%2FMf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002ab8d5956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/assets/moon.png","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:15.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /assets/moon.png HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 25600\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\netag: W/\"6400-19b7bb89375\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuxiVy5nEzxw3dWFgPc3GFHSaBsQ6jwyWYd0BrSiyN3WIsgaO0P0eYVS%2BttMu4ZGd9RHC7h71wHeMd6DIN1%2F%2FGhdRk1v6ZeZWHl%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3002a1fd0a56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25600,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"601c26447218426c6d45c501853ee237","sha1":"b700ff003c1f5b919cecb45a9e5ac7b1898bf2df","sha256":"537032799dd4e554a15bff2ce3e01426adef79c28a84e8ac0886b20d8298951e","sha512":"e454bf4dae0ca567f726cbe84d0c1b866e9a0a8af68c4ccb2c2ecacb5892c11f2cb4ccb939318734c0b93b64ea9a15318d7fece47b199203510d8608929f9657","ssdeep":"768:GT6gauMSVAgw9AQSTFrPJQpDouUtbyn3XA//4SU:/gaOVAnSQSBVCotq3XFp","tlshash":"fcb2d0e219c3cf2bda1665f3173daa22ae9b58d806de130d801856f66323d0b91b5383","first_seen":"2026-01-02T13:08:19.243937Z","last_seen":"2026-01-24T13:52:48.582481Z","times_seen":11,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/assets/shot.png","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:16.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /assets/shot.png HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1064\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\netag: W/\"428-19b7bb89377\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cr9md1XgwoWCU9UkDTiIigDdU69bDF9gqvh%2F9JR7pWN9qxh3ou5pyL6dhiGkF3UMU3zerPnlFxPGTvJYnzvkJC7b53HEFsa5KCLE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3002a97d4156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c13ee7992ff73a673bfe0547e1a379af","sha1":"ff059671ca2b841d461a6a3b402021739b4ed124","sha256":"f689be6bed4c1a7eeaf3da6e193689be1fe7ebc04496836cbfef1708993576e1","sha512":"c8e65e282c8dec3013cf3278e7d4572e8c7d742f6b60710db9e92bfda9c77db847e73612fcf730f7ee0e7f69789d0764b7385c95c6a1f7a7124e76f7da297355","ssdeep":"","tlshash":"491184f923b4739cd4382e31b0595b85d3a9296eab4aa2a681808369472c6e65868703","first_seen":"2026-01-02T13:08:19.241598Z","last_seen":"2026-01-24T13:52:48.593512Z","times_seen":11,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:15.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:15 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c3002a229dec759-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 11202022\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 24 Jan 2027 13:52:15 GMT\r\nlast-modified: Thu, 17 Jul 2025 09:19:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:DBRrm/vG5fGdoaDeh22uQwI8My1RV9gvdXX5t2U+5Rk=:\r\nfly-request-id: 01K0BTXGW6S2K26MA56WJPWZ8W-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160943,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65349)","md5":"6265e0fdfc33469d7a2685ef9dbe1d90","sha1":"f92f15fb1910349904d5f42408e8d32dc1c2f5b2","sha256":"54e9620f4bb734040cbc05d32f9bb6ac9f79e65a71f7a3ea6be2640df4be0f78","sha512":"aee566c3ec5d6828c29db678d354089adf54dc9a29af93ca6d511258de842404cf908c6025b0766101ef9a7ce60236daa600bb7d00f6086405dbdf29ef351370","ssdeep":"3072:wPlRCBLG+dlL4lui/StxAww9r9bjoO4zm0LF6Q8TRhjXR6B6ahA+:wPbChGAL4lstxAwwnbjoOAm0LF6TTTjw","tlshash":"03f3b6927692f46203f186fa04760402f31a7989398b856cb17ddddb3c9dc8e71b9bb4","first_seen":"2026-01-02T13:08:19.242513Z","last_seen":"2026-07-15T01:43:33.72319Z","times_seen":26,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":25,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/secureproxy?e=ping_proxy","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:16.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mooonshot.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bmJlHjsnh0Keenstr1M0thjg7ya%2Fd59Q%2FDQOyPtvycwNLlYHlxIbLtOnowu72VIsJn7OptM01MNUeS8HOX7ItbLIWjH%2Bq0eUU%2B6\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3002a81d3656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-25T09:33:18.740865Z","times_seen":8958,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/dust.lite.min.js","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:15.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /dust.lite.min.js HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\netag: W/\"75579-19b7bb89380\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrNlXQlW4TX6LP3udcTi84Wekqp1tCaxUrfvFUQI7%2Blbhn8pAFs58kwS4K5AVUpJnuz5%2F10po96QopafjAWeh5cHL7Ue6oJSiZiJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3002a1fd0956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480633,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65159)","md5":"f32507e31d57247342cc6eb7bd6a4335","sha1":"d7444848313b7b1212323b740f859bf120aeff01","sha256":"1327fb38679e73fdbd11dd5478b35b738b51db683907e68468f48b7bfc091edf","sha512":"f75abd0348c931bcf236dd8911ab2131260df3f63b23631d0418b49c77608fbb919c5a05e3ab15ee76c01070d51c024e1f4e7bf013a3939511981d91f72bddd1","ssdeep":"6144:qxzxQh0usxQh0u+uGEV99pPFAV99pPFQV99pPFeZ1SrC67i9x1j7YJv+mctgtL/6:q8V9PtAV9PtQV9Ptei5h6","tlshash":"d7a453ba1b8ce187877190e6b66e218d9c4373311edd787fe3acf58be100856b1d16a1","first_seen":"2026-01-02T13:08:19.239781Z","last_seen":"2026-01-24T13:52:48.578513Z","times_seen":5,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/assets/footer_apstore.png","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:15.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /assets/footer_apstore.png HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2880\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\netag: W/\"b40-19b7bb8936f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52SOoxv00C4mHVzmfFBrkvWt2j5j4qxWXBh3BpiJwPQhlG2EpIJh4DWOvu2cWmb6E1emPFHJehrJu5jJDMBWVH9LOrFmdLELbhzq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3002a20d0b56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2880,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"631648d40f922f1945ef6267eb1ddff4","sha1":"021c29849ea8e437eccb936d00b6cb78c7515c03","sha256":"5016f35f40b650bc38b8262e3bc7201f2e8d879790433bdf34a0461480d2ad76","sha512":"bb1e78b1c4457df1f37149e964d7d4b156edd67b7ce39d432186abc48e365052221cd324919b82dee7f258c6865a537c0eb0111709220ef6e171f0e171c0f689","ssdeep":"","tlshash":"d0513a74630c4328fab72f39799a2b0a236da5f6d74a4a10c18055469018bc1eebdbc3","first_seen":"2026-01-02T13:08:19.244863Z","last_seen":"2026-01-24T13:52:48.583413Z","times_seen":11,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/assets/footer_google.png","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:15.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /assets/footer_google.png HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2892\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\netag: W/\"b4c-19b7bb89370\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FV9pLzoTwp2BCR%2BjZAfr61GGXlI6C%2FcURSKMiqeXJBhjw3pvyOGWHsIgpS%2Ff9p5QVMWh7VONKanqnEvc9HFf%2F0Ly8yxF9uvo63f4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3002a20d0c56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2892,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"01cd43b3305709bd63b0d3f75e986924","sha1":"21e15d8aa1f45052fdb02a6f3d1b03a4171c6116","sha256":"421f6b78bf1addc6e1e118ed6d8415fde1a3e0c847072f8f0f317cb186208d35","sha512":"ee69abdb0d35706fe6accb5061bccac5e1990699cd65df27bf7fa37cbdaee5ab16c77ebe5028cd77ec80a81700a62385a406ab1a081754a42e825b7888cbcb62","ssdeep":"","tlshash":"5d512b1113695b29f05219f8e4e40b49db29b83f9c1b0a2ab6d841372340ee4a16d9cf","first_seen":"2026-01-02T13:08:19.240648Z","last_seen":"2026-01-24T13:52:48.588682Z","times_seen":11,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:16.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c3002a98d4256a3-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vrHoHJImVeGGARlZyuREylNDkrui0jYiCdfz%2Br2RvygOaD%2BDiD1RB%2FWiwHzERnPq29LtYSx1HPoCEy1d25ZehLkZJtq3bOJ8lrlqDEFlx1vKDoAYcTK1PmYx0PDRqUSx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2910\u0026min_rtt=458\u0026rtt_var=2739\u0026sent=171\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=178973\u0026recv_bytes=3904\u0026delivery_rate=21103741\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24135\u0026ss_exit_bw=8085670\u0026ss_exit_reason=2\u0026cwnd=22684\u0026unsent_bytes=0\u0026cid=d83a154ec1190d9c\u0026ts=1642\u0026inflight_dur=106\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20802,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:16.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R0CwjFRSN0WNJgGgkDSVVkDWr1t3l5xBEeX0bMXHSIhWnwKEdLfeA0DyZMJGSOKxumsF%2BWwSYjqnvuQulSa%2BzH47IH1CAwaaMpWdBu792R7NXemj6G14D0wqtSoXBmy7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3002a9dd4556a3-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3033\u0026min_rtt=458\u0026rtt_var=2300\u0026sent=173\u0026recv=40\u0026lost=0\u0026retrans=0\u0026sent_bytes=179763\u0026recv_bytes=4213\u0026delivery_rate=21103741\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24135\u0026ss_exit_bw=8085670\u0026ss_exit_reason=2\u0026cwnd=22684\u0026unsent_bytes=0\u0026cid=d83a154ec1190d9c\u0026ts=1686\u0026inflight_dur=130\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20802,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20802), with no line terminators","md5":"c663c54e6cc60920d9a8da59997d213f","sha1":"4a12225d3e4680e05923a9b00822b2acfec1404a","sha256":"63c2939e2d39b839ba16bf2522b7bced3a20123cf1b2d1140e6b296c4cdf0836","sha512":"95366fa5823d5ae0ac07efdd76045c76508089bef509a9c632c80f2fa03e9c896d8f0104ff023874593c464944679c173a69407a09e79bf38f8b194140921659","ssdeep":"384:l1pEauOzM+5//fbmi7HU0dv1V9I5pXbQEJ+9Zk5clBwpG:NExa95nTRnv1jCwZkEKpG","tlshash":"6892d7ce3ec9f05d9269683111ff38ebb75d9ed874484a00d292e8e87c6077c8666e5c","first_seen":"2026-01-24T13:42:44.340239Z","last_seen":"2026-01-24T14:19:36.35Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c30029d2c047131","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:17.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c30029d2c047131 HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12137\r\nOrigin: https://mooonshot.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mooonshot.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12137,"data":"nZxrvUmiehlSmSmHdFDqSlhdCdnednrmYmHExdIrNYlyd37WW1+6cYlCx9jdlrWq6dGiLrlHdEGsmo6iD5j+jdWRjVjdeq06dmUrm-d7WYmGhxEZI9v57Hxm$T7-Dtv$Zrd2aLxZ6IZ02Z7PM1ddnisEoh0ed96NmibM61BlrrN$sM2oEyDUa0Hpa6sdqh65MrhkCdmbVKthesGeAeSnBLdmK8rdLdN23gsmu5PY72NR9A+xIZ2VyPxerAdmqirdDE9F5uJCjurdwJ3C8y2ueddbVpGd0NdmJDgrXNlEadlJ9pFNGfuCa1dduiIrToEiaVD8tToZn6dETsYt8IoddgNweaN+eYEEYESY6djk4d1FaB6dxoesT-pJ526mbTNNsut8xlcPbc30DgNB2XdKxGuZ7cxV4sBufDlxWRrreebpVAawde58pvUCpkTIsJpw6OUiGC9GHEGA2v0FBM6maiErlmpLYU2WN2t2w$YHfxB7OwCNrqes$ijB8jjE7tBA5wuuSouirmUBpk0CU-tnbL+xdd3cKsyGE4pFFgYp8MiUYCVTCtZ57eF7OapBRdRCJAopY6nCqKe98mLv8iv4RT36dHJf0W8wr982hwMnhODzstMrtp3LCamyuoE5jb0FihpERbIa7mwf6cp6108BDoVVPhwuZXPweDiAmrAo7DA8ECMiDIwpuArUpbpOLyLZrnduYdbHIZ0r8A8vSmjVU4pU3Pg7glAI9BcoLVEqgoBpatnU+4rE8dafSUD6aoBOk+SHvRRx6jlNg4dl+G5UkUvepv6adGnaUrtu4Om+UzJmrlYcI9lZWRxxHqRwHWnoyxZqIPtUFOpe4Zo$gd-F7dx$dMFi9mhvajU$xYjoelYUppn6vdevsal-HNrF-nsUFih6bGIn6xIrNSYrUex70RuxDmrvaYrsVMpx7pdhGs+6ZUa15jU0gddaAgx2odrjgbjkUctBgx8rlgdOoICh6ktN58UMH6jUJc5nFnJ6iCk4W9dGexLmJgxKEXi5AbU5$X6vhNNBPDr6fGlnZ$ZWuPkuH6-lZeU$du0WjCb1eByv5$0pCh5mfm5$qaI6u1ElFETNp9UjUBns8IdPaCyces8rWEjT$r36ct$c2AsobBblRindeH-lmCdD0VDeOveDrul2Wxcd0Ja1GsZoOH4zojrGnlSDpUsLecDuvdaS6jex+Y2USWMze2zF6xruFnnBMnflEh6YdstaLD7W69unbs97ENlYmbHFYoU1FOTNlvUvOfZ90XmWaeLhxe-UhagSyn3zl7hFhnvmMr0reughrmEKBXxi2pk3sYeccE1Irh6Wa0Fh8oxU4$rgT2PGCC4SWa9UaBmYYnUNsUcEa0cYm0sXS983sxrkgdPaPYX9ek-660wOsjU27XjIZrlumPOd5EziYjrrBYhk3HRxdeZNPmZdKadShxcJefrBPgNYhaggXdXJzf0+FZf3e0vD9drsxnUgWMUz$Z4wW3mLywRIL-xkILBPME4UVBcNni8ZHWMBX$xeBuinztA1gS6K1po7xAwvLOAjr8aIlzXXLjrNdTADdhYbmdodT1is2lbmrcr5rxmTMtRz$P3+n6klMj9d$2rRmxmtqgmd1rMmIli5jadgi6xVaRwyl$7s5YKJSVWlvuKdd83sh635GdlNEHBgraSMlBDxgs5IjIV5K6G-bghuIIlXFqrjW+gJDqBxYiLqsxrMF2dBtrlHSUOYp6Oh6i6MerFgDNm3issEg8RU9-Y1sDmV4LcSUM6zD03ciEfgxJaYWi39Diibc7$Ik53se6VxWl22F7li5EWY06fe+fscemNBpMeaDU8p5HkFNpEDV4$l9gpUrldEescW8p6m5DO96iPuemoSx-dhbUvSiRsuOY2xPb6ae3lde1DC-FNrjcseJ8E-dg3Eee1ep7+JNrIcUY2Sdfd6KNseoN+W00pFHbOtPYrUrmt7eVlF5rxIlx+F3t3bO9dGryc8mtDVl2N4bpVrh6rI02ZVvCq2fr3aXtPDCFgT7R012rg0gybN-mBplly7x1Zw$V3bxdnWUNEduxPU4E4aF80E2xu$Fd-yMS59jWi32y5HqXFZB0klUe$oTxPKrF0YS416Or54UofCw1GWHjrCYEfqohMsOW1qx28Vx9wjdFPFfVYBLxsk9U22bWprdb-SUVLnVPGHkFYNb4BPwr3KneujKGgRmCeFPDjMFvViymY1FbG5FUC-Pru82I57vE456MVywxmIBgxWMDNfo9NnWjCXT8XioemS8qRps0rEw1xypkwrGJgCWeuplDksvuYsLtVJx9YO6FzP9mgOWxFPqcWHFYghNkMPM+FJOSdtSWcUL0hS7gVOMdCuP7xm68IGR$4ktrbbnnxr04+5iCnjVnujc58xY5GvCTp73T5D4Iu+bj+4vYT7KdP25+VtVr5wWvPFx2+sZ63KYE6adDMk4c4seUNH8sFHLhEBnntCx5u00ygyCwEdPbyOxBCou4Ub0sk3fx7+FYvU$IVfX-336NCUnJ79bm5iy45EWji4cEgS75hamvg4nhy-9dXBHFdlgDCDSadtLsg9+5jIKl2lUUMPaadJBe4Z7deZ1bkY03Z6x4xsvXy2K0-bkbTp97iqJ+G8nsvV2dNEY8RDcpdC0Mxzc0Om9UTqAw8Ynp0he4Y3O$msVtVHO5amzCYY-dCNPzco39cj40SYf06Dq0e+G58O09e9TqriwydsLmXONKTmPmYr3NNUl+Z5g3p0g6mIEo-UW+yi9Vrm4x0u5NSd2XaLdUv2b48UUxWI5ign9emxDN5KqvV0cDJbnsko9KfOCckt45szqa+PPyuIETiCNmmUxJ8kKIUMWyC5eGxmtE$lYhEljHCOVnCXKaFZJgfySLDP1pblpVrunYDPfkLNT8kd+hhO6UIH5mdOyn4Pz7SHSayrTx+3mpwoIKKlenks0mScB$KYN2IdFg5VzSoswIPHHqkYEEZ1lBpLvwVUXqLRByHKuYVqNLN0eMfSkYkohht-vlFCdNgwI4rScsD18jv2RtSfOR60jxC$Em1Isj$WJpguZjaAWX6AMNqUmC+4YqrJvh52UbaG5FDNIEYidJAv+w7vXcseEZqX8KeS8xaXePEVeOktI5XCboS0HKYjieBqZGyEXnvuLC7cs0mmnw7ouodKifoxJqiVIPvdChGNnugup-OK0429j80xnuT6Kk0IOPwO+29CYmW8Rfj7WF1hZjVPII8eLL1CWUojIESVdqPFvv1vmqFyV6h4fxx5+z3Nh32d+T5mVY2+BmJts64pH4BYpsmlVuP-jUMiGm9aSRVEOPofkkwzymMuKWrYImAtnPIgZnH$RfcvW6DVNx7ZHfhj0EAyT78lh6Bcrq$JJ4$kKWypXfuB3ok$XfrJDXRBY4RNNPPgvm-YUmmuXvbarFJrg6gkeJB0LhDk4omlKxzKRwaK-WRsOx3w$ZxovKL3OYylfOJvrss3EeS6aZOOf4UR-v7eS0LPSd+sy4eP-r$qkYvjiqMVIjbkKrOqGK2mxskeEm6UpKmFv3xYbYld$8uaLd1eZKZ8ENbWnYMU6YrNH0oqX8opE3EPa0Feo6bG9xXe8auqFOrYXe1mDZnpL0gx6v6clZxI+eSmiZ03PRS34UO3OPSWEdY4pk+Z+F+Z3lNdyG0lzm6I0wMObjwPxVkdeeiGm0iNF3OKZKYgegOO6c-jBNxgkYVWoqFjwc-eKxGmj6nYg516TPqRP8EO4IJjOxppsRaWm0CsaZ5Ub3i6CrajsolviePpHYfZBafRYZFVXPw0ukxROV147vSGxrOZvOIRbvFRHj9gTKIZ4cdVCc2N3GNekNxIkq5vao0gWRIj$g1YvNC3hpqdBGieNeo5KWW58qNq-I9NzgJ3zNrlSWOokxsqpVBobgUZyNzpKr1lBqapMxzV1m3YFcAOwRHO+sMmLRJR0P1Zcxi43p+W64GdGwCqGju6srSmaYBGqqIRakkrhVfNF4ldVehZZNjKBdq8JZSp3VHj3c-m586tYYIVbsexyeDR8pWaVZIYsrHOo8HY3e7lavd3xNFRqFmRStAWiv6IJ8HqGP5lxmAN1jged7GYnF2m95m6Ipo8IjGRSatlheklZO18IjwPi6npEst5wPDvsrt55WuR3Oe23K5WKGpmrNM66gOaMRb0e7UtNeEdTs1NeZsrugplpodVivXKeeivixMa-8p7n65cVmdIUGmqC8UrqGilhe1l-WhvdVe4RIwFNcJIuVpYsqKRidRZS0oqpP62MtavpommdcsomwMkRUjpNe6w7do6UlSkTmvKmt2lXNuREd9KdIXOEObj5kixLlElw8L5o6+uE2G80togdPP7k2sqXlilBlj2f8MPUge7K4$a2qdo00cY1etYrI0RSsrOmurd5aVlfG-2KVH5FkGj22ppF2+6awV3iePwS4ldYvsrKq07KWalEZDRp0JuWV47xu5l1mjF06Dt64e8wcVYWcKxnYNRJjP2JwBKekLWAmoK43Ul-2pudCYcsUocr5xrJqgmYuEWdUNdAjaPbd4NhNN8dTPNjwr5dCBoSdKUS6-gdbDZLZBT00Xg9sTkbtrZ$uKa$2swv2CU2agdTPp3cFClh6CrwqiW7N$cCGf6GF3u6b$ZsCR5Rk8KfGHVSRRNllObBmMlgegt3kh2vOrwFFhGrtU5wOL6FjJ6pFXgVCvd$spNl0pggs$sGtN4rlprBmMa+TdgwVSdLROTdZbkGcBlG7Y2bxtj+jYsGkTZnavsHE4cX5Pt8kxUqGeYt5b8l6qtFWEc3kW7H8rKxUypMmH6jRb0xjXdLe3l7lbw+qN3+3DjmdOgXusw9FgTDFd4WqJ4ijvGTP-T+Yyxz6dczCck5lBKZlajsx8ExUlZs7Vv7ecgzNsUTaj0aVCcqkHqzCqPy2045U2UmlimhqVm4NqVOaoqlTJ3pU3dqaZqa0lcaW5mEm4Crjv2I4gO0mFGH4HOa7UZqqd77jZdjbu6R422DGAm5daxPpNmJcqPoYjdndSeiEP6-CNPIp-8WeMTrt-efRVt0T3xOTvgdb5v-2rYqCiuMCBO4F0lx2HE$OoZ+OqEhfag36lKSy8scWuP23XN30edlYITL7tb6U8OogoUcRges$p3Fm9Kabjvn8O7I6XNbkkUumV3hb6vIsbx2$UES2zFnbNq4OLklPIFrym0jdzppdW6Lq-4+RNetjYG9b9j3b0cH$9gj2gyEkdoovXRoueuTE$apVZV8GSE2bpV0CKgCZajc8kmgd3uEflNFjdNOqBlUlFevlLb5mE0KEAECU7KD4CrEtbaFag26CHq5dqghC$54aSdGc3xtuRkHKoerKrKNdUNbtRRItoNymFcHRH4-O1lFCMWhpzsT7vCCY+PZ3huBcX5oYlxXOmqj55eq4rKTVCN4yOZZ$puZ2xEjKnK0eaTBmS8tmwj02OaZC7tLVpkos62+$+y1ePTI3JGO3AwglOPHBJWuThFNGmgEx36V7bRbZKaewq2IZWC$lDp8jg0FKzyWd9I9Ii2xtr34rxgBl0P$aL0glfOacV8lZP5g5+udgMs7BAm5c+ub4422be2J8xoHt3qaVDByZOKnYnwNPRTItdP$f4s3mXsdytCBDipkUW$2Eaj6uVlEvm6zTpUqGKkdojpnGT3AevvqFLjFatcT4nc-OXwXNZ7Es9BOc7dZPpngOBlkN-TnqGtBesyePuFe4wa42j6xwdTPZs7ruFsXdXlAdV88ObwnBNsZv6GVemnkRyjdEsUE7sUHqwV1Ckm6PLF-xtgr82IaxaI8DcBreI$hFJjOHpdqGSsdPygWmtmsKcq95HhLl4rU4yBrt9WFG-tLgllltrHZy8yEW5x5yB$ItB$N$hBSB3WuBulge7mk8CTiRI7UDsxBNbboT18LjJPDVqwJ3J3jub26ReT6ZqOFaoqxZ4Z7vuqw3d$D4tN52fuuFoh7m7egTwtiwjFhls7hb5kBrcCdEbp3GEeTpFd95F$4O8OC5skdVCcj$On5u5ee8gj3VJ2jcSObwJfTPVgipgNHlus-2h5ElhcdrjVNxVepalambq6m8+H0u9t5fC8RrM6LnyYzdrwdbeNiotym6Mlggeyd4-favAwBE2CWby5Yam6PF00VDeIv5UCI8MOK5PYNDpDTnVefHFDouYBUe0BylzTsCi$NBU$36KFsE9TT3JyXyEO4-oqXgNVhbxZaIdSnK7dxHEd3$WGgtyu7thE$biL$Bs8M+hTHPEn7Bmb34Psas-n3VpknjXFgmoKHVu$BqoR8STkw-UB2qVbbydZHTC4XmoY84vWvWUeohPThpqp3P$t$hjwMaX87P6Ng7Sy5jBN3FLe1mSgUnbeMFHu8Z7uPfaWuD-dIbCR+bXy0uuc5BOhb$S$7uft-m2qu0V2MYLV-NoH-4P3Kneb6R$7BUkjcvn702OTdhNf$SMgnjfgLBbZuKoOEGLfg4f0Ue7hym9$xc2$Ue0l8wHKk7Be-RzTVZsrJ3EjXpSe8wM6BnipLmJCZqdU7fKfxr8nj+1l1vIfB7ufBSVBbHSe+eX7$+Dvll0dz0xIrBl4mlkfI+N3+c0DHEDwgmfDYHZH9GZDfOUYi4XqW2ORClvdyddybRSHN3j$hnRLg4lHVqi$WSKFUfs1u$baotH$p4UBUmWtEjw0d3W3kxm0RcoYlyeyzTBeLWuLkcpUkZmpZ274DvT$kLfndbu7UczTtRn3j-v-kYJVCebR43NepW-avlghe5hP77H2d22YiVUHKvw90aAuWu-IZqJdaKCuxrtchLyHSkcSfSZ1KsuEbvFD15+syf9DnnqCgbU4p3PDVHvv2gsJ7HCqW$y2OyZRKWkqMBWLD$EE1KExrIowkmRfJHWlh3934ajlT7fqu6gTkqr+GHoE9Iqh$lCe-9B7EWwtD0c7LRxTo8oozLsbNZ2jU+RfhJ4Ek2fuM4RCGvGv$Pj+oHBUa7VmRj71IEP6aRFDd4eL24apwbaV2OteMa6-EEq$AlWv5ymBUV0CwqkCdCmTkJd-AKl4l45n4cAe5OWdd3g0UEOhpET3-t7dehys4Zm0KF7+INRo$TO325d+hbCy0menIpzn7KUlmwf-PLj5jmfLfBx4+aw3zLlKDk4EbHy5f18vLltSNMnkIu8N$v5B98pdBD4BOPESZIS9M1Ja2MC9EAf+rL4ry+1dSW$fVmUTxoH080pXbRqyF9WdDTVdgc9897rEyDRwoUufv1Njt7mY4P0H54wcsIkq5RipxYRpp-eIKFmWxUlBWZib-oxd+1bTZLtCqmoKXuOGkukmVtSZkRfOkUmlVdhsm0RBSiu-8iAYwiIFbbkkg1ckRP+AEm9NoVX6knknj6Vhroc-WC1mXKl7TLekKPT2-u-u34++bR-2gqu0s3u6JD0hRV0HILoW-nFalxoW33YErAbpB5ptXN2yJXXMHMrl4fleVL991wziXxEEFVa17gkI95FM03zt4N355mXxeXh-v$iB2$P7eqkMs3G1bWyiKDVmn5UguTaWky9pB5O70ePXAm5PkUoc0Gc1yNGUWlkpFgsdrf0rtN6rdsF920aeouY3UIUpdruN6g0Sod16qF-RdWR+hNpcPmNrG7S0gaGdIKivn$yNpCm3VDepg-NsUjaY97wOmrp007pYn3rvbJuUpuJ4$XPz491YHMN4lsuV4zs0bdaIV0XsWMqf1YWudnR10Gdzsx7N+yqKih7M9d1YHhddarm3Unr8Pd4vylUdL4y-nglm2ENyJYY3bHxV4xprOeMr4ODpvgpElK2FSzrS9e4ISepxXxX21dk6su3VeXrbSkZle06WtJs67EdqexewIEEodEnp2HNHFp0l5dB6VgtUdgmaea94+0x9rIeUalWsM6BT5$cIUErRYB90GHemk5R-EIa6MNIWmYgNEIBW5i4FEhgriPkMF6MoHXc8enex6G6odJg7sg9aimhgiNHFeDW-eXrwrC4gdcgNbeaSR6-wx1BtdbeJBEa9N+bt7gf2qrYr983DCldblEgsNJm4a6y5UmJHE8qB-4FycneGID2eZ0Top5jehIRp0xK2HleC0Akj672Pp5YIojtN9scZpRlzd1eXrFNN6llyPOEI+2+EYVWX5e5RmUY+OgNYYCe5plk6exu3IXNhknE89v2nN6Pra5JlleE+DNYrp0516mrhfWXgbmWgxoh0TBvccMkpIwaadf5gYWpcgdSW3+q6UNx3gkg06skpimkHeeqNY4q264LYnBIJUbPrrgnJ2JBe1ahaP0i+xKWHNuNiqvrq75cPeh2NeiC9KOhNKGcd5Rlyh99mOnFeyUa-WswxRkHC0y6BU8Mzdf7eCpeaIeMrn4UGPp5mgNXFI2renPpeEgsaL0$rONi7tnc-mv0sYckhMvlN0oT0LpKKrMtpccuVdVsJtDxkCNH6qeYdnhCgW7gqoKx9HThJNfkcjUzYPJxSELfmdNPJs1Bpilsm35sUqrorX646eImVmzx$6o41UI-Gce9Ic6$xTTfsduJxaboF5SgNOU6XMhZsBNbBFKNRPa0ur8uh90$PSUwafdmSKHHIlzU+BiqFUkykfgFrqrvEDiCyhPdKrResOd8hExlrbjUa9slHkzE0lolX7ZF1dc7xMri6wImw1OndykN2Y7BZ4u6n6lYlD6jgF2dn+eed2rF+dEnDkPM5MpFrhZ6t8YqyoruAl$dOlYnVZgfccUq2CN7+Hed8IjbSZCavug75mdLIadzdd6HY5Kc4MbHa29FINDhlqZhSVhk9v2orGh0srnrncx5tYut6EY3VTpW+0NdepMd92xxHWWdmc5iVaUePvWH$jXs+9qLCyhhU0mS5O7o5lumVfW8OojdRDJfHYc9ezuMdaAxMLFNvR$dby-qDqru5YuOZ0S4DesHAuzmVmjEXheyLUfMegqoh6hnGdjgXgZ5Vm8mhNd0E4pSpNplrokxpyNmbdwWjrdd5xlmH6tdPsnv$LFg4md-4+-5xrJPs55gZrd0k-Bh3Bsc20im6T2Ni0yWAm+Zitd5HHFwlK2Uxnd14novL-5aFE+r-UOYxkZ+NnrrZd9BKKZ-Xr56HPSe52lwe-xyzb6DUTMgxIqzu3EsTSgGaSdmPXNwyPHNU7Xo0IO8DlSgg+V0JA+f67rk9EXNHbk63hpxHkx0lbaBasYJV0zBd7Cd$PuxhuHkhMO90a0vsECI-gDwEIgYIdT7HkD35FxDPmVbtUsrz2ybgCf6ZNxUmHP$o5ByLiNd5l$5bpfPWgiEqegIdJoWsF2NahIBf5so7ddEdqhFHkcRU$dMZ-wijmFjEGk6PhuNdGvFdaInxnWhRrSmeoYiLdurc4goUoGEoAm9mprHyvrjFas6drJ8kxmbcmIarp4wYWENXNHdw7$4CrNMl9dbxxEDB2wm4lFlnEaxnY7+djm9llFHreWNy15$jUkbLSo5pyinH-7ZJkYbddC8bdSUpe$79dmOgqetrH0lxa2JyC-5ClFF67xdKyp+hMdSdZVRSI75cWbxaGCdora6kYNelL-FHl2EZn7IotcYKYgi3ZbRkMp6492tN7HKEcLrqOYY7iARlcxL45O$dFdNHKtkzIlPfqRYSkvCvltnGyjAnH+EH7poD59j76mHvRkRugmXH6qF+9yDBI$G9xgCk+ijkU696MCqfkWHAIT7H0dEADJyqYgo25Gvd0SmsHRk7Okd8mAumOh1xW0VlHjaMjwHRD$PfGF+qEv96TD$Pu6rhYqkydADEloGNrl2F4lzbDt+GAjZrWNhKWYldki4lg8VcAn$RcUr5+LbCWfxrTlGZ5DjCz6TnYU4ErSl2m6nccJ2kd1OzezH6TkFuTjHjf20nlKtJteljjBeurkT$AtBv6YJeGY5ndv7Sk-iwMMtL-2VrMaoSUrJZHJr-tjMadplJypd4xWPbHjbNLXHs4akBva5bSYdus3Ts+aa5$HmS9RDIuUmt4CIHIpmy4Oxr55geMbDzTNTZe1jjUyB9GghCJOXxxMeXlr4$g8aYjFh1miZPSedkp5cU3ygfeibTdK2eiJa6N-F7hk9YxpumJZPeCrk0jZpSGDfv4EP$52DUyamtI1tz02uxp$W8ksvtodPqh4ZYvYPrbJmMuhS3Y8ZNRUmONafNJfnr3RobvldwM$rvJU2ak5I5GpjiSiU-rFOEylw8mVZ4dN5O8HaO8m4BVBT5byYTShzqPowCEav5geAdIG68EJOcxxSrrPwI8EH0d03GglkSSCEKvHuMOG+CSPJolkkeVMX9FYNVE5GOdq6gsnj5Mr5GVZPOv-DTNYTDk$ENk9z6TnmgNdUuaH99nYBUlAviVg-HI8e3eITvOSl28rcNN07JOcxMktmC55K5vX2b$B4gK6DxC$mXHusIOlhelOEsqiTHvIEjv4E6PUbMxJSCxNWbyGYpaHER+RDcUWY2zl2kll-eqELMsZgi9ODBlOIeOlP02TITMDaEHbIMKBCa9ecl2LvDPN2TZlaN+5pVzZJO2ad0BMI6U5b1stUcae0m1Mh6Ns-ICMhiopOh82VLYcRWnTld4bNSM$bcWMC3pGbAUzWYry-CEIhaWFTV6JonbhGc7IVnBq6HlemmMhskkSFZP0ZIVXrPpogIgLutpG5qIren6je4e9OobDS-$0Lxl7Fr2$-dYHFtDFE1kqrHMy+E8-ouWGB$P8uEUtv4l9mO$f0NbJalGbqVg$A29-KO3uC+a2Mj8S+9CS3u$V9$zV2y6fhKbgVyjcXNJEHogbn30$hpXn8H4pCGVIB2pMJq2eHbkVPjKinJKDhPUH33dpM3Icex+EeVubqkqzE8VvElVOYGz90d9LYlx4L50VUzb6VKEfOn$-VRjE8-1uIsI+cwazC4c17tVubz-bJK84rTfVubNe7JEy4rTGV4nSe4WKmPAkxvsneeZiiI36CL3buCeXnKrSbCyVe5qVx$CCVKC2kP5pVUI8DmZqnV8518Vo1xsLCX6jeF8oI974ZCFVobfej3tsPfkevXOssy$0xVDTMKer2USJEVP2CRE7nMU7o9aVEbEVCnVUUX1$UEYJOubyUf0CHkbEgkZSHwXUWWux$eKK0sg4G-Y4GtpKbnU8ppLC3UE+v8uygtaCm3sBzvB5IgtaTd+xBzk2no7UW8IVM$7qxnv72WFmVnbWv3nnrKW8+WAEm06-LV1205+6BuvvbjptJT2SpybmTbF8oPTDnSBqKuunwGvqFgyTRpubzCX7NqP7Eov-$yC4$Ci-gEVKKbnCO75hLFEnKp-fpUXpi4HEqYynpVo3pbVyb-v9a9OOrHS3w$Jv7xRCAqp$4+TP3B-Ks-UoYeAcwV5dAN8YT9HC$wq+0mk60JFtMahdO5Zx8slBuy$Mj0n9slieMdqgEIy$PIedg7eVmDmpuM8AOrzvysGmSkzs5wdxgDjfSJ0dVB8YTdxvfi6IzrIOv+G97P8N$Ly+NKg+emD8E0i7ae1yGjEiVBsDr0qexNrddmwFcqBNvocxrqYdhRJ$GNrz6Dy$4hEezm6FV6JNFsK0mPlFlvPvdmyWZxGShpe6Bshucn6ddWbrrZ9dxpe60DmXrA2p6DHC-mIJTeFEmUmhDTg4rTrS6Xp5bnS0RIPJXYITTrcFmRd-dTHrdm6IdtsddpU5BOR+dR0JV77cSdSdhxa+asCdlWFUR+r2+Gcq3+$BwRvJnd265G4WmiRFsC+rdnaiRvJpedD8Sgl$iw-YhdKd534n$iwdhwh8rWo+6m8mFsO9jDbG-26GmlxVsFcJdeoBk66dzscMS6gco0xBsi9-rm0DBd1Kdr07T877Nhddm8C2g2Hufhmod6kLiDTPYmnwmrHdkOkfSmbT036O8zrxslKBid4x0mpixJhYc8e56$4J5c1UXR7x4xX2lMY5dl0Prb6hYmL10esUqOwU7SxB9Ekt4WmvPEiIiuZr8rnsBsR8GcFZc8lgabXLtJNWdC-eZwc2mH4t0deroTblrur8Blig1fdp+N$4qDYtVseWRIxMdcf0rNrlPI2dhdmS5mequZYg4F282C7dI0hwWPuZw2bmcmktuU0jN+xc8m9mX6odvdndjf3sd7F9dNzHBc6iXCb0Ul9dHBWhDbCR0Bqcd-hddgxqXHmkeHJ-DqBaEJmflcJo4AfZRMhfzGcT850oUm1N-sddvRkgrdd"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:17 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c3002ab3d4b56a3-OSL\r\ncf-chl-out-s: FNrNCz3cBvYxDJKmstLPeA==$BgT2lrwRPP2PPPoTgG8efg==\r\nset-cookie: cf_clearance=TzZ07Nb6miUgy5Nr.aqSzV7r6AuqvVKcipbFuJZ.lF4-1769262737-1.2.1.1-7bjUVWTjONXeUEO4F6.rcpnqSGbiap0GI3yLwvD571Azwxyztt6hD0EHpjBQ6rW0a8_MFpyNBmliRsFsyVR88NKy4Akfs1Ie3klNEIlPex4kmAAvVAgAC_y2wCl95SlAS8Is.uvik49FmuQlZX06Kztq8DRusQcFMrqYEL0x1z1MJVLbI1fZMAkx9VppRJPeYMEBnM3IPF0FWN71kmFDGQdNAwB651ER7YKb9A_jtv8; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=mooonshot.net; Expires=Sun, 24 Jan 2027 13:52:17 GMT\r\ntiming-allow-origin: https://mooonshot.net\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ICJMDbeeIIhcY7ZZIwYAX52gYz17nW2jPLUKFHFJRXmra6nNGj%2B8CYwNrXl5CpRzhmX8DIXBaQ48z7PilgWP%2B5LjflTwmRMkHhdfYiDGWVsp1F0wm569rWvX8o%2Bq%2FrR8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2773\u0026min_rtt=458\u0026rtt_var=2244\u0026sent=192\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=190455\u0026recv_bytes=17162\u0026delivery_rate=21103741\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24135\u0026ss_exit_bw=8085670\u0026ss_exit_reason=2\u0026cwnd=22684\u0026unsent_bytes=0\u0026cid=d83a154ec1190d9c\u0026ts=1911\u0026inflight_dur=132\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net//secureproxy?s=%2Fjmpd%2F","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mooonshot.net/","date":"2026-01-24T13:52:18.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mooonshot.net/\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://mooonshot.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=TzZ07Nb6miUgy5Nr.aqSzV7r6AuqvVKcipbFuJZ.lF4-1769262737-1.2.1.1-7bjUVWTjONXeUEO4F6.rcpnqSGbiap0GI3yLwvD571Azwxyztt6hD0EHpjBQ6rW0a8_MFpyNBmliRsFsyVR88NKy4Akfs1Ie3klNEIlPex4kmAAvVAgAC_y2wCl95SlAS8Is.uvik49FmuQlZX06Kztq8DRusQcFMrqYEL0x1z1MJVLbI1fZMAkx9VppRJPeYMEBnM3IPF0FWN71kmFDGQdNAwB651ER7YKb9A_jtv8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:52:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"d5-MA77V0CT8jYj2cIbAPK+Su4LVRI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9972\r\nx-ratelimit-reset: 1769262798378\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:52:18\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 635a0ddae83932120cbac8e8111c1209\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZBx5cV9Ph%2BFM%2FTZH9JL%2Fp%2Bfr06eBCri%2BuNcubmdL8NrGIO5O23W0tlTo%2BWL4nSaAbl3U5Tq5QJ5wiebNFQu%2FtMwHvXPaNN0l84c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3002b27dc656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4bc1b2ebb64d19c186d565156668614","sha1":"300efb574093f23623d9c21b00f2be4aee0b5512","sha256":"4d2931e475fa111b97a8581582a6b70d7a6ace04a2e356bd0a89f717f4133415","sha512":"22db3f6e42daeee53a07394db0a38334ed9ae6bdea1f2772dfaefb9db35a4f3cb590aa2b4cdc233cdc6940f96dbc7085fe1688f933eedee58cc52ded633cf358","ssdeep":"","tlshash":"b0d02356444745422794f965fa4c45043786d0751f5c2d2db790d3f134e70e70b07f54","first_seen":"2026-01-24T13:52:39.047575Z","last_seen":"2026-01-24T13:52:39.047575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mooonshot.net/","fqdn":"mooonshot.net","domain":"mooonshot.net","tld":"net"},"ip":{"addr":"104.21.5.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:52:14.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mooonshot.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:44:38 GMT","end":"Mon, 23 Mar 2026 16:43:23 GMT"},"fingerprint":{"sha1":"81:56:B2:A6:82:A7:3F:E1:49:70:50:54:F7:2C:C7:F2:77:48:A9:F8","sha256":"C7:80:54:D2:51:3F:DC:47:EF:4F:3C:A0:07:3C:35:7A:BD:5E:58:D0:53:FD:94:2D:E3:57:44:24:55:A1:C9:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mooonshot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 01 Jan 2026 22:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xg4c3%2FIg4D%2FMny%2B1aBiICt5NF%2FsOSewC7PlN%2BGOjtQYkKfRqgCokl3K3x1lRZu7IIDsNSdZw4aBel%2FxCQdu26mVfMihoN1eZKZEg\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c30029d2c047131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52757,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926)","md5":"a9dfabefb337155c6c2f6da334a9b395","sha1":"25a0085536b814e1b58aee64a8f99543ba2c959b","sha256":"b25d7e3e5430e6ddfed88a4ec4407ab21068c7438d812e920fe3c975b0079e95","sha512":"4395a7b162521a366817a1c3ebc84aa73af4ab8e9b8137368791f5ce37f51f026407effd25987533f0744f59dca2630e4526d42b793e1ea0b837bdfc8ba6e66f","ssdeep":"768:tJD4Ei6PQlKwlTPm3lP7dVjU9bEHsczoNbZYmUPQL3GC4QdLmwcirSx/k:vM8Wolzda9bEHwN9Ym/4Qd62rSx/k","tlshash":"af33f9e1a6f53020215394966a57860a3314f443e90fd9287fbc95c89fc6feaddb3788","first_seen":"2026-01-24T13:52:39.04971Z","last_seen":"2026-01-24T13:52:39.04971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":54,"dns":27,"connect":1,"send":0,"wait":326,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"mooonshot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}