{"report_id":"4a49c908-1153-4238-aeed-f34e712d1b4f","version":6,"status":"done","tags":[],"date":"2026-01-28T20:35:06Z","url":{"schema":"http","addr":"trk.moonpaymentbtc.com","fqdn":"trk.moonpaymentbtc.com","domain":"moonpaymentbtc.com","tld":"com"},"ip":{"addr":"18.189.164.239","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trk.moonpaymentbtc.com/","fqdn":"trk.moonpaymentbtc.com","domain":"moonpaymentbtc.com","tld":"com"},"title":"trk.moonpaymentbtc.com/","dom":{"size":17983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (17983), with no line terminators","md5":"86fc07169e49ae0df783f62a01f6448d","sha1":"7ff13f46257422fc6ceaf5f964d1939a924ef1db","sha256":"474a1ec277f07288188d7f05a6a4f7e033025e361d4f65be33ad5b6ba52354c5","sha512":"fa3a769f0dc22ef605f5139eaeeb9e8575377c8bcf3d739d2a86275bc2906733a8bfc19707235cdc7565581842bf88cb56dc7e856cba7725fc68011a1608ec02","ssdeep":"96:H5rsD0r6pV+CZXUgpk5POtQwb/4P4lHFjqGXSTCOu:SDH9XJ4P4lHFjwO","tlshash":"5a828ee17dd29c38f58516c8f0b1ee29a1d3f68bdce3d884e9d411f827caa94750d1a8","dom_hash":"domhashe3d1684b07959ae004e6bee0958c6cc1","first_seen":"2025-11-19T16:17:41.084229Z","last_seen":"2026-02-22T15:55:03.57643Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trk.moonpaymentbtc.com","fqdn":"trk.moonpaymentbtc.com","domain":"moonpaymentbtc.com","tld":"com"},"ip":{"addr":"18.189.164.239","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T20:35:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"trk.moonpaymentbtc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trk.moonpaymentbtc.com","ip":{"addr":"18.189.164.239","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-26","domain_rank":0,"first_seen":"2026-01-28T19:27:58.713808Z","last_seen":"2026-01-28T19:27:58.713808Z","alert_count":1,"request_count":1,"received_data":252,"sent_data":491,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trk.moonpaymentbtc.com/","fqdn":"trk.moonpaymentbtc.com","domain":"moonpaymentbtc.com","tld":"com"},"ip":{"addr":"18.189.164.239","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:34:44.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk.moonpaymentbtc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 12:58:24 GMT","end":"Tue, 28 Apr 2026 12:58:23 GMT"},"fingerprint":{"sha1":"EB:83:48:34:94:A0:B4:6E:6F:E5:86:B9:2B:F8:FA:20:BE:C4:0E:26","sha256":"4A:DF:D3:D9:B5:D4:14:9E:7B:8B:15:C3:82:52:94:EF:9A:B4:16:7D:7A:17:8E:81:8D:1E:37:1F:11:FB:E3:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trk.moonpaymentbtc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 28 Jan 2026 20:34:44 GMT\r\netag: W/\"15-uFFjCr0SbbbFb/CsC0M2sF++swo\"\r\nvia: 1.1 Caddy\r\ncontent-length: 21\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21,"size_decoded":0,"mime_type":"application/vnd.mozilla.json.view; charset=utf-8","magic":"JSON text data","md5":"1a2f74b460cffedf92c98ac426a35e5e","sha1":"b851630abd126db6c56ff0ac0b4336b05fbeb30a","sha256":"0ec14c19bec9cdd6d6863682b6a23b4e9d816546eef9a0b2d48949bbd36bac16","sha512":"abfa81e5110977b0a9b53dfac79fafc4f85271ab6356de6ac0724783ffefb5111b211131ee4abdb1eb1e474f089a4391b99d1c3d974bc148f7e58f64378c2a40","ssdeep":"","tlshash":"6d70000200002c880302200230002a0020a000a00080a882802c000c0308802a083200","first_seen":"2023-05-04T17:22:48Z","last_seen":"2026-08-07T19:55:46.317291Z","times_seen":999,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":316,"dns":99,"connect":104,"send":0,"wait":217,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"trk.moonpaymentbtc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}