{"report_id":"52f1a735-880d-4cb8-92b6-6f5cbf12c632","version":0,"status":"done","tags":[],"date":"2026-06-14T01:11:31Z","url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"title":"Sign in to Xfinity","dom":{"size":9350,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3909)","md5":"0b362cb4d1a8e0c5acd1bdd52cb005b9","sha1":"4a5ad4daf13d90ad41eed904c53054c43447f43e","sha256":"4155bb6218d207ffcf0a486908be250d98c176fdd48ba43b7819a261fafe2705","sha512":"c6940d8d6b468ab21dcda76a37fcbaf646a791d532868a4537d959be39cecbde7ae3a04046d9d1bd16ab2d5d814666c171bf0c61c0f7b792082a6374d7870f0a","ssdeep":"192:15wnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3Z:1eB8Ht3DUulGmmv3D6vglETliCfJ","tlshash":"b0125c7f09e93305d8128e1539f267993d69480f9a866f6eb9ad1311cf8ed10e1a37cc","dom_hash":"domhashb70fb35b092f3ce15be09e0b7c82c155","first_seen":"2026-06-08T02:25:40.390203Z","last_seen":"2026-08-06T17:54:00.269166Z","times_seen":50,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-19T01:11:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"polaris.xfinity.com","ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":292399,"first_seen":"2017-04-08T11:22:46Z","last_seen":"2026-06-13T02:21:11.100004Z","alert_count":0,"request_count":1,"received_data":211834,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jezqzfixgomcanhrbtvb.supabase.co","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2024-12-12T09:08:53.504458Z","last_seen":"2026-04-18T11:55:17.4115Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":595,"comment":"","tags":null,"fingerprints":null},{"fqdn":"moondoteth.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-04-18T11:55:16.739882Z","last_seen":"2026-04-18T11:55:16.739882Z","alert_count":76,"request_count":38,"received_data":1089142,"sent_data":19920,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}]},{"fqdn":"login.xfinity.com","ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":28072,"first_seen":"2018-01-15T14:52:54Z","last_seen":"2026-06-12T05:27:14.96582Z","alert_count":0,"request_count":2,"received_data":5144,"sent_data":1151,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cimcontent.net","ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2008-10-17","domain_rank":228070,"first_seen":"2018-06-06T22:15:44Z","last_seen":"2026-06-09T16:45:38.349897Z","alert_count":0,"request_count":3,"received_data":150233,"sent_data":1692,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"assets.xfinity.com","ip":{"addr":"23.45.145.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":181423,"first_seen":"2021-02-08T21:22:48Z","last_seen":"2026-06-09T16:45:38.668046Z","alert_count":0,"request_count":1,"received_data":379713,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/polaris.wc.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79229a735a20fa7064ba4866e76ea168","sha1":"30814aaa45c83d54fb7fda69880b3a5db5bb65f2","sha256":"6a76b7f4ea7f8b6bdd06737cf2fdee12714ed42a498aab9631019842c34da288","sha512":"63809be2fac4edb838974b8bf6115d93d7e04b8ac8e231510dd2e03e97434c7b539f4a52106461e1779c02a08a1e82301d55170c3053b0956669ec1595f847d3","ssdeep":"1536:AW6HRg0xIxIZI5IGIlIpIaIxIZIvIGIzIpInfjUTDYNXwWOW83IpWpM:AWORmSqKDO6/SqgDc6nfYD8+GWK","tlshash":"9b24c6351114723a59235ff2b2efb212b22f2094dfb781d4fbd2100aeec86d2966d95d","size":219729,"data":"","first_seen":"2025-03-11T12:54:16.412126Z","last_seen":"2026-08-08T01:05:15.004021Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c14471dd7a2764ab84b52055428c8d","sha1":"520f4be425454226cacd536c25d2b2a0655d88e2","sha256":"350e97c2dd84347680074a3d214211c2467936c2b06b61504b5290d614b1ee3d","sha512":"96888d36ad7ec2664d7a109d205eb5b0b9242504bc6e0e9505e41e2b6712c36b195ba25f42f3b58c38203d8975ff41391d23cbcd427e12244a334173fdf0466c","ssdeep":"","tlshash":"b8d05e5c0832cab08213698f613bff496561159a521ad08f9b88ff486f14e65cc3dc64","size":251,"data":"","first_seen":"2026-06-14T01:11:40.078752Z","last_seen":"2026-08-08T01:05:15.005631Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fced0cb455205a98dcf861adc1f6d6","sha1":"f27e2b707bd92855ecdd4ffe58c0601f5b22713a","sha256":"cd440569a39917ea21f0fd2e08fea416f8af2745e6f8986c8b1afbfc11fcf811","sha512":"0659ae7d4a7057ae888c09945efdc022ceb8a0e19d6035c9f59833e62e5494394cc21d6619cd674722cf924fea97f1f3c494848ba23c1e03b5db44243750aeed","ssdeep":"","tlshash":"34615cd3ed9a03af742885ce40f50322b126368368ec42a70ba2eb0957e334595fd358","size":3403,"data":"","first_seen":"2026-06-14T01:11:40.081528Z","last_seen":"2026-08-08T01:05:15.00882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-08T01:05:15.011963Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba41c61d884d3edc0098a4e2b7bed52","sha1":"f0254b459ccb5da5927d353da22f824309e98c67","sha256":"269f4c49edee96ae549ae7c023855d9866ceb1c745d0c46c37ac3ccdc5a69bf2","sha512":"14d4221f2644b71a7814634cf35cf874118da0fe16aaf90f9979e7d00144b7e47886af9afdfc78f7b847fe3077f7ecb962bd881504b51246152a69b5b7f03988","ssdeep":"","tlshash":"7c31bb15359a0bb00d9f65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1557,"data":"","first_seen":"2026-06-14T01:11:40.085563Z","last_seen":"2026-06-14T01:11:40.085563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ae0af417668922e63cc1d8febc497d","sha1":"5cc95a35fa3c89ecb26005e3cb5e53a92124926b","sha256":"36e412d8a13c86992b53c09ecb54e825b513044e05a966648082e85b8f582ac6","sha512":"ff6c73cc069fc2d6f9801df79db22f211045b59d684b0f36c48c140bbeb670d43c0da605b9174db59ca51e8723e9f5c1c69d9885e0d6e6eb76f946e382100958","ssdeep":"","tlshash":"9ad0223c76a7a431501bfdaab74f62cdb674c8433049a863740c62042f83a6948e1886","size":201,"data":"","first_seen":"2026-06-14T01:11:40.087277Z","last_seen":"2026-06-14T01:11:40.087277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polaris.xfinity.com/globalnav/polaris.wc.js","fqdn":"polaris.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1101e75c954308a48fbb627c0c76ae3","sha1":"369e5252644371f21ea3ac844bc155c58b202d76","sha256":"ee2afb7e080662140cbf13c098c0fc1ada816f637c07c12fa6ac44603aefbc8b","sha512":"dff84f98ab4868a5a1523eea2463271bc592fe0227f3f867a6da1ad470e5f8d8f318d361b8cc216328ffeee48b583f2700021b9d5101cac94fa3b470081e12f7","ssdeep":"1536:6XMVw5xFk+lshogj18QHJ18KvY9zfsN9cwZq0J7WqM:6XMgFAEI7WL","tlshash":"7124c8351158723a4a235ff2b2ebb311b22f1090dfb741c5fbd2500efec4692a66996d","size":211160,"data":"","first_seen":"2026-04-18T11:55:22.01549Z","last_seen":"2026-08-08T01:05:14.989335Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/otSDKStub.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.232Z","timestamp":1781399457232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/otSDKStub.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: ABD6:0A4A:27002E:2A507D:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.238920,VS0,VE223\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 17ae24cbef94437d019c34c492759434ef7e5a57\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/comcast-common.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.235Z","timestamp":1781399457235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/comcast-common.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7366:17383F:4972A1:5009C3:6A2DFFA1\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.242156,VS0,VE120\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4f20ccb68eb04d1af6487d3ab0775b73991f3faf\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":5964,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/prism-ui.esm-b305f73.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.244Z","timestamp":1781399457244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/prism-ui.esm-b305f73.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 95E4:2A23C4:4898BF:4F300F:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.250913,VS0,VE121\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a89d72df82760b5c5605024b49e0869fe8289d0d\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/bundle-b305f73.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.246Z","timestamp":1781399457246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/bundle-b305f73.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7D46:2A23C4:4898BF:4F3010:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.252374,VS0,VE111\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3681562de2b5908f8d8b70798ce405fb5f23d424\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/cookie-consent.css","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.593Z","timestamp":1781399457593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/cookie-consent.css HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 324E:66EB7:480CBC:4EA3B1:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.599347,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d5adc6e57a243597b9803e24ad345cafb1e71ffd\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":5960,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement_Module_AudienceManagement.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.956Z","timestamp":1781399457956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement_Module_AudienceManagement.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 262A:17383F:4972A1:5009C4:6A2DFFA1\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.962836,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4b489821360731f54699afa527ad4c9c7883bde3\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/saved_resource","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.077Z","timestamp":1781399458077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/saved_resource HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6FEE:32B7D3:48A10B:4F38B1:6A2DFF9D\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.083546,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cda17f1579c3643c4fc854fee72ba36416149ea8\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/favicon/favicon-16x16.png","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:59.031Z","timestamp":1781399459031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":""},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/favicon/favicon-16x16.png HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 184\r\nlast-modified: Wed, 10 Jun 2026 20:53:32 GMT\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:11:00 GMT\r\nset-cookie: AWSALBTG=MpgdKlUKqaexpUCIGNcRs5a8bb3iuzOsh+rY4wB9a+o6Mf5uPZEhWihqs2iwsGfIegnaq5N3tiRLGpFWKrGnBUrewObrWau5MnUkJ9XxaVMe05l0kZuu+55vT+tfbO6PDWWTMKQMdwi6IvZWXFFbYXBxcS476HwvikWoqZg2Q3mm; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/\nAWSALBTGCORS=MpgdKlUKqaexpUCIGNcRs5a8bb3iuzOsh+rY4wB9a+o6Mf5uPZEhWihqs2iwsGfIegnaq5N3tiRLGpFWKrGnBUrewObrWau5MnUkJ9XxaVMe05l0kZuu+55vT+tfbO6PDWWTMKQMdwi6IvZWXFFbYXBxcS476HwvikWoqZg2Q3mm; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/; SameSite=None; Secure\nAWSALB=gRMJPmjUVOYbqcOjR+X8Wj+7eOqIXPVwiuOcx9q73InrEye2ekJK+AWRhK4B99wQT6mA5KRX2xhs/zlQbcesI+ZxDlVR19I8SDWTSar5uS0sc1uQbZVwWxwe/FxV; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/\nAWSALBCORS=gRMJPmjUVOYbqcOjR+X8Wj+7eOqIXPVwiuOcx9q73InrEye2ekJK+AWRhK4B99wQT6mA5KRX2xhs/zlQbcesI+ZxDlVR19I8SDWTSar5uS0sc1uQbZVwWxwe/FxV; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/; SameSite=None; Secure\nlogin_dc=west; expires=Sun, 14-Jun-2026 03:11:00 GMT; path=/\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184,"size_decoded":1379,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit grayscale, non-interlaced","md5":"db142cad60d6acbf015835843f35071f","sha1":"56261a4d35ff1ad9c210376f025f8762e608494f","sha256":"1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801","sha512":"73373b61b828ddc6223a9a48286efe5efc5610f3358738035cc347acecc1a98dbf6d8697b0e04131925a54cf97c4bb1f39de408ebddc69a2867a6391b63f5272","ssdeep":"","tlshash":"71c0c0ef73643c7de8080e3f6c0204b19c2543c1c6f1049013b48030e300f3c02b8502","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-08-08T01:05:14.99284Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":0,"dns":214,"connect":290,"send":0,"wait":594,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/s55795643539887","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.228Z","timestamp":1781399457228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/s55795643539887 HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 355A:22C28E:48C73E:4F5E65:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.235189,VS0,VE107\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5091578477f7e544f9e9be2ac826afda7e41641e\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/saved_resource","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.261Z","timestamp":1781399457261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/saved_resource HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6FEE:32B7D3:48A10B:4F38B1:6A2DFF9D\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.276833,VS0,VE122\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 30a1c461df2d97f9de21965cd6adb796f9cab715\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.960Z","timestamp":1781399457960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: C3D6:0A4A:27002F:2A507E:6A2DFF99\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.966473,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f0eb4438fb016f2cc23b92df822adc373f20829d\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":5980,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/ot_company_logo.png","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.148Z","timestamp":1781399458148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/ot_company_logo.png HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2628:0A32:24AB5E:27B45B:6A2DFF9F\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.154517,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4193bf443e08fb70fae1cb0a527496fd447250b9\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":5980,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.152Z","timestamp":1781399458152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E02A:1FECED:47E486:4E7BE1:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.158789,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ac4eb64ef0fe1080739dee97bb5ec41579748642\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/favicon/android-icon-192x192.png","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:59.028Z","timestamp":1781399459028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":""},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/favicon/android-icon-192x192.png HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2569\r\nlast-modified: Wed, 10 Jun 2026 20:53:32 GMT\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:11:00 GMT\r\nset-cookie: AWSALBTG=fk1KlR2HgwmT+nkpSMpWsfK4pW5IZzvs+nekmbWJmeJIHpjXfOY8b7j9jjv/ghQSFZCpiDc5X3TcN4tMHFkQUsdp94qlz8OZKY35E7DyLoO4IgKrVElTU+RKjoWe6Sjpyz4UPGQApBemGtJdD25aGz/P2/6aEIXnieToiFOR7ohH; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/\nAWSALBTGCORS=fk1KlR2HgwmT+nkpSMpWsfK4pW5IZzvs+nekmbWJmeJIHpjXfOY8b7j9jjv/ghQSFZCpiDc5X3TcN4tMHFkQUsdp94qlz8OZKY35E7DyLoO4IgKrVElTU+RKjoWe6Sjpyz4UPGQApBemGtJdD25aGz/P2/6aEIXnieToiFOR7ohH; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/; SameSite=None; Secure\nAWSALB=Ss1JN7x8CUUyrBoO4xT19665Z7AyMs8hapX284W6NtK/s8aB8uphqXvVYBeWwGi6XyjFGistxTTXanOgqSNlMKKSCfwSWEQwW8GsBXEMQda7UoU3+5iQdmTT7N4M; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/\nAWSALBCORS=Ss1JN7x8CUUyrBoO4xT19665Z7AyMs8hapX284W6NtK/s8aB8uphqXvVYBeWwGi6XyjFGistxTTXanOgqSNlMKKSCfwSWEQwW8GsBXEMQda7UoU3+5iQdmTT7N4M; Expires=Sun, 21 Jun 2026 01:11:00 GMT; Path=/; SameSite=None; Secure\nlogin_dc=west; expires=Sun, 14-Jun-2026 03:11:00 GMT; path=/\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2569,"size_decoded":3765,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit grayscale, non-interlaced","md5":"4d5a72cfafe8a0e67a3a4e3684ae379f","sha1":"2140780ff72470e5a9d63fdf950d7b816ce804be","sha256":"b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375","sha512":"a2323abb4342312eeaf8cb9d5003287a64665dcc859424f84a80868fc9cc3d684464627e728ea9d688d9af50fea2d55a849ed753615667f4226bef751345776f","ssdeep":"","tlshash":"86513a75d7229ed994c95bbcb11d230ae425841c3c60899bd73f84ae8a92c16bad8fc4","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-08-08T01:05:14.987711Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":-1,"dns":216,"connect":289,"send":0,"wait":631,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/polaris.wc.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.248Z","timestamp":1781399457248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/polaris.wc.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: application/octet-stream\r\nlast-modified: Sun, 19 Oct 2025 16:56:29 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68f5183d-35a51\"\r\nexpires: Sun, 14 Jun 2026 01:20:57 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 75F2:0A32:24AB5E:27B45A:6A2DFF9F\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.254852,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fb0a018eadc721cb86efb197eda78ee6f3ef0276\r\ncontent-length: 36205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":219729,"size_decoded":36922,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79229a735a20fa7064ba4866e76ea168","sha1":"30814aaa45c83d54fb7fda69880b3a5db5bb65f2","sha256":"6a76b7f4ea7f8b6bdd06737cf2fdee12714ed42a498aab9631019842c34da288","sha512":"63809be2fac4edb838974b8bf6115d93d7e04b8ac8e231510dd2e03e97434c7b539f4a52106461e1779c02a08a1e82301d55170c3053b0956669ec1595f847d3","ssdeep":"1536:AW6HRg0xIxIZI5IGIlIpIaIxIZIvIGIzIpInfjUTDYNXwWOW83IpWpM:AWORmSqKDO6/SqgDc6nfYD8+GWK","tlshash":"9b24c6351114723a59235ff2b2efb212b22f2094dfb781d4fbd2100aeec86d2966d95d","first_seen":"2025-03-11T12:54:16.412126Z","last_seen":"2026-08-08T01:05:15.004021Z","times_seen":13,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement_Module_ActivityMap.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.253Z","timestamp":1781399457253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: F07C:1FECED:47E486:4E7BE0:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.277179,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: e43d017afcd6ebdb643a61d7ad44d9387271b47d\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5964,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/prism-ui-b305f73.css","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.239Z","timestamp":1781399457239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/prism-ui-b305f73.css HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: BAD8:0A32:24AB5E:27B459:6A2DFF9F\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.245454,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 952a0881007a420a2d54988b4d8f3d1677236a60\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.259Z","timestamp":1781399457259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: C3D6:0A4A:27002F:2A507E:6A2DFF99\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.276855,VS0,VE108\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2c461329d3f9ba0c2b8485ce44e2ecbad34953de\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/polaris.wc(1).js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.250Z","timestamp":1781399457250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/polaris.wc(1).js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 856C:22C28E:48C73E:4F5E69:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.277338,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 87f71afd89b2015112f35677b80982e3c8c931a9\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/data-layer.jpg","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.270Z","timestamp":1781399457270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/data-layer.jpg HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1E2A:2A23C4:4898BF:4F3011:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.276816,VS0,VE105\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b0b4b16b826cbd05bf9d564dd3c8d4112557a8ae\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/ot_company_logo.png","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.271Z","timestamp":1781399457271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/ot_company_logo.png HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2628:0A32:24AB5E:27B45B:6A2DFF9F\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.278022,VS0,VE117\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f7fec4191b4d2557d14711d9a086edb3a21245d1\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":5983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.272Z","timestamp":1781399457272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E02A:1FECED:47E486:4E7BE1:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.279049,VS0,VE125\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d23db70310e3c88fbf9237d56fa36ab7e149dc70\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/otBannerSdk.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.958Z","timestamp":1781399457958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/otBannerSdk.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6A1E:66EB7:480CBC:4EA3B2:6A2DFF9F\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.964979,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ea220ad19a28e2438ce1a0dedc5c7c93aa5ce96e\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5981,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/dm-sans/dmsans-medium.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.964Z","timestamp":1781399457964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/dm-sans/dmsans-medium.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://moondoteth.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 29896\r\nlast-modified: Wed, 07 May 2025 17:42:38 GMT\r\netag: \"935dd4c230fc4105c9c5bca40e99f815\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: paDFs_WNmJZsahrxNrMCUgOdUurUcB3q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 997hCOLJZmhOwkrQanJa5mSIeEALzdDEzbepHF10e8aYbBMW7k9Nlw==\r\ncache-control: max-age=31536000\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":29896,"size_decoded":30395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29896, version 1.0","md5":"935dd4c230fc4105c9c5bca40e99f815","sha1":"8beb7e52a31ffa2725b2b218442d62d0ceb4c842","sha256":"da319dcae9d21873bf2ad8b146767e023772a8f0a4fd7446156b3d61b9c83098","sha512":"3ea928e9967aca9f08a16c9da736d1190e98bac3ba7bfe35d89ae62a2bee40bbbeadb9666749ea51a373bb1067ad942923e411c59c61f57dd19bee2b7c6d63d1","ssdeep":"768:RZH2c+zizOdQ7piYoQPXuFxkVMTJQQNO/4dP//pZX:RZH7xvtLHGTkVAJDNd1/pF","tlshash":"00d2e1c798e5bcc9fd911dc27e327359691fa70046a94f8c3bcabc45f3ac41a165ab20","first_seen":"2023-04-06T07:47:01Z","last_seen":"2026-08-08T01:05:14.989816Z","times_seen":90,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":263,"connect":30,"send":0,"wait":86,"receive":43,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.252Z","timestamp":1781399457252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 61C0:203CDD:48763E:4F0D9B:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.277191,VS0,VE112\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cb6fdbd63358a510564b0dd650b098e15e53c7e6\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/OtAutoBlock.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.231Z","timestamp":1781399457231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/OtAutoBlock.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1338:22C28E:48C73E:4F5E66:6A2DFF9F\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.237680,VS0,VE109\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2e0b9763e74b70573147142b2f47c468af020e48\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5964,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement_Module_ActivityMap.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.955Z","timestamp":1781399457955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: F07C:1FECED:47E486:4E7BE0:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.961906,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 0e949c1b4274f1c1f06c0ce16343bb2a656ccb88\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/bundle-b305f73.css","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.240Z","timestamp":1781399457240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/bundle-b305f73.css HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 19 Oct 2025 16:56:29 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68f5183d-1706d\"\r\nexpires: Sun, 14 Jun 2026 01:20:57 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: D28C:2A23C4:4898BF:4F300E:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.246723,VS0,VE111\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8c80419351795a6e6573100c7d8cad38f344fbe0\r\ncontent-length: 14404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":94317,"size_decoded":15143,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65472)","md5":"721e9da05d8b91685220d2bbd61b49ac","sha1":"f506375a69f146e7bb384874c018ede0e03fee94","sha256":"1f3629249c7dc2ede28d83dcdc61fb7ccb51fc7722536874c7e54ff3fc7679e7","sha512":"1f51c7850d87a801a213a4544cb1b0cd5c6c0ad1cb0dca331e5455064c7b5b076c4b45585b2becbde9cb5cf1deb13287cccc882c8671b710e13675a2ee661299","ssdeep":"768:SI5IhI7IYI1IhI1Frm5RbdEDhmwCATTZxFqj19VGA3YaLqOjTTZhOoHH54pGnhcz:SI5IhI7IYI1IhI1XYvH54pGnhcCJmY92","tlshash":"0b930115fb01522f781a86be10acb1a397270147db6b47f9f64b100b7bdf9c7929720a","first_seen":"2024-08-12T22:42:14Z","last_seen":"2026-08-08T01:05:14.993652Z","times_seen":15,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/otBannerSdk.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.257Z","timestamp":1781399457257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/otBannerSdk.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6A1E:66EB7:480CBC:4EA3B2:6A2DFF9F\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.277017,VS0,VE121\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 02b38223eddd1f95863ec8cfb4039e229a165720\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5984,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.954Z","timestamp":1781399457954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 61C0:203CDD:48763E:4F0D9B:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.960361,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: fbc80a28f800bbc1d10045827217e324d3c86c75\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/dm-sans/dmsans-regular.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.962Z","timestamp":1781399457962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/dm-sans/dmsans-regular.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://moondoteth.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 29920\r\nlast-modified: Wed, 07 May 2025 17:42:38 GMT\r\netag: \"b9d5e5cad821648da76e2fedb6c6a680\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: B6Y2UPZ8HumiPBqb9Tc2GO2DjkgxwQ9e\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: LHR50-P4\r\nx-amz-cf-id: rnNc1lJa6lOwPJVAjpApAMfhkimHlQOqLCzTINdUcxFTPYKFwNnjsQ==\r\ncache-control: max-age=31536000\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":29920,"size_decoded":30419,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29920, version 1.0","md5":"b9d5e5cad821648da76e2fedb6c6a680","sha1":"f99e9d4c60c524dfb2e5015dfc754ae325773ff9","sha256":"40aefc09f33205666c2c42f20d54285147ae9434ef5f8018481950fd67ddcb68","sha512":"4a94b57c36cef25992c4324289e3ceb6fd5e22cb053d1d6a0c81749d421192c4cd9f8abeed548fd716492674b0cf568dd1182fe402a0f36c77b21a37cb0aca7a","ssdeep":"768:YUyDoffo32x6g0X+TIhsqOGmalsmzanisIZFk7:qmKcksqOGmJsg","tlshash":"1bd2e189fbc2b957ca45816c2e707da9061d8500a5afeb3499d31f3d83e24b7b880d5f","first_seen":"2023-04-06T07:47:01Z","last_seen":"2026-08-08T01:05:14.99225Z","times_seen":1562,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":264,"connect":29,"send":0,"wait":87,"receive":35,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.xfinity.com/assets/cima/login/default/ad/Wicked_CIMA_Desktop.png","fqdn":"assets.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.45.145.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.971Z","timestamp":1781399457971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.xfinity.com","organization":""},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 29 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:01:59:26:4E:85:CD:CC:7E:EF:2C:2C:34:AA:D7:94:D2:BE:B1:DB","sha256":"E3:64:8A:BA:7E:3C:69:99:1B:C5:35:B9:47:C2:61:87:AF:5D:03:B0:46:C7:2F:44:04:66:1D:1C:FF:59:E7:E1"}}},"request":{"raw":"GET /assets/cima/login/default/ad/Wicked_CIMA_Desktop.png HTTP/1.1\r\nHost: assets.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"d3574f49d1c087a4a5e9e18e7a26862d\"\r\nlast-modified: Tue, 11 Mar 2025 13:43:24 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1267\r\nx-edgeconnect-midmile-rtt: 59\r\nx-edgeconnect-origin-mex-latency: 209\r\ncontent-length: 379018\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=782101\r\nexpires: Tue, 23 Jun 2026 02:26:00 GMT\r\ndate: Sun, 14 Jun 2026 01:10:59 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=755, origin; dur=0, ak_p; desc=\"1781399458207_388255502_671351980_75387_12395_36_143_22\";dur=1\r\nx-robots-tag: index, follow\r\naccess-control-allow-headers: \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":379018,"size_decoded":379713,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d80fa5f5b07c2f4d66bb12785ff2b6d0","sha1":"4b26921fce34fabbd16f86585510352b6515e23a","sha256":"6cf7aa7898f4710247b859cf903f4aac32bbd6a527d4234093b466591328770b","sha512":"5c53ff1f38d3e63c5ebbdcd1386c346ac5e9ede722f0c49753e774d626b7e79a5dbd0c58a50db36288d21e530d71c9f54c851c3d178ea1deaf2e44fbd3a7f675","ssdeep":"6144:AcpJCV+2sC7T2ZHj+ppJNAWk/5mVEbDDXUwgdjvKiug93ADat+as0v984:AYC/sqfaf2rdxf3A23s0vr","tlshash":"36842330df06ae79db4bad385d054a86c2f1248745768a071cf2f417bdc1de92aa3772","first_seen":"2025-12-01T14:52:09.689602Z","last_seen":"2026-08-08T01:05:14.991781Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":-1,"dns":201,"connect":31,"send":0,"wait":802,"receive":536,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/polaris.wc(1).js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.952Z","timestamp":1781399457952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/polaris.wc(1).js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 856C:22C28E:48C73E:4F5E69:6A2DFFA1\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.959069,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f132c6050fa97600c27d8aff99a5c3ce499f2be0\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-14T01:10:56.698Z","timestamp":1781399456698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/ HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 19 Oct 2025 16:56:29 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68f5183d-6afcc\"\r\nexpires: Sun, 14 Jun 2026 00:26:02 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8490:32B7D3:47C927:4E4505:6A2DF2C2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781399457.834791,VS0,VE110\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 940bc1542cb74c2a2d9bcb356c49319d604ceaac\r\ncontent-length: 60885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":438220,"size_decoded":61603,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b158fbe4056ad6bb6b8adadd5d9418aa","sha1":"807951d63333a395e84116153becdbbd969da00a","sha256":"2090ca32e028bec887ee684f4ab195f197586fa02d8acf3731ea5014a7c4cc37","sha512":"509b3b49a4e0e3b29fb53bef3824ebc303fe8c3014f11d5e2d0538952e120ff85e98c22335e8b4045913a33f89835b2451d7f3bc5095adbe8107b8cb3827a558","ssdeep":"12288:Zn9IjiP5EoJu+IQ6pnDFso8KJBccj5AE9vwg:Zs","tlshash":"b094b7491163622f9c9363b8a3dbb20672265087fe67dcdcfbcd5224cf887e9486164d","first_seen":"2025-12-01T14:52:09.682197Z","last_seen":"2026-06-14T01:11:40.074407Z","times_seen":9,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":36,"connect":41,"send":0,"wait":152,"receive":57,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/cookie-consent.css","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.237Z","timestamp":1781399457237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/cookie-consent.css HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 324E:66EB7:480CBC:4EA3B1:6A2DFFA0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.243456,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6900d685fb7efc833f0af0c3fe2d3d482d44ef29\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5963,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/AppMeasurement_Module_AudienceManagement.min.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.256Z","timestamp":1781399457256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/AppMeasurement_Module_AudienceManagement.min.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 262A:17383F:4972A1:5009C4:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399457.277042,VS0,VE113\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2a26e66909a25e2eba75ae8eabd9271daa8ba536\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/static/ui-common/cookie-consent-2.1.3.js","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.601Z","timestamp":1781399457601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /static/ui-common/cookie-consent-2.1.3.js HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\netag: W/\"6a2c73eb-239b\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-github-request-id: 49F8:1FECED:47E48F:4E7BEA:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399458.607111,VS0,VE103\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 33cf710fbd776c4f878579114d70b85946da4968\r\ncontent-length: 5142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/data-layer.jpg","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.144Z","timestamp":1781399458144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/data-layer.jpg HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1E2A:2A23C4:4898BF:4F3011:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.152203,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b3c34e631e5a2db85357c38f80a311c1a2e38db6\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/dest5.html","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.154Z","timestamp":1781399458154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/Sign%20in%20to%20Xfinity_files/dest5.html HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0B5A:22C28E:48C749:4F5E73:6A2DFFA2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399458.160267,VS0,VE105\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 10490c83e9c446aa8bd407ed17f9866aa1dcf123\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/saved_resource.html","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:58.156Z","timestamp":1781399458156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/saved_resource.html HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9BE4:66EB7:480CCD:4EA3C2:6A2DFFA1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781399458.162068,VS0,VE109\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4ea6c957f17c0794f7272445b64006b843d85caa\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5984,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/comcast-common.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.536Z","timestamp":1781399457536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/comcast-common.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7366:17383F:4972A1:5009C3:6A2DFFA1\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.544413,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 609286292c1bf70430aac9d96baffe0b831d5d0d\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/prism-ui-b305f73.css","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.604Z","timestamp":1781399457604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/prism-ui-b305f73.css HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: BAD8:0A32:24AB5E:27B459:6A2DFF9F\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.610184,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 794c43d4169ee96f1d0de97c00fb7d6ff057e0a7\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":5959,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moondoteth.github.io/wemail-login-xf0auth/bundle-b305f73.js.download","fqdn":"moondoteth.github.io","domain":"moondoteth.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.605Z","timestamp":1781399457605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /wemail-login-xf0auth/bundle-b305f73.js.download HTTP/1.1\r\nHost: moondoteth.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/wemail-login-xf0auth/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7D46:2A23C4:4898BF:4F3010:6A2DFFA0\r\naccept-ranges: bytes\r\ndate: Sun, 14 Jun 2026 01:10:57 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781399458.611550,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: afeef30a52653a5e89e9f849a33dba4295a0ed50\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":5982,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T04:46:03.58566Z","times_seen":19034,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"moondoteth.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-14","alert":"Phishing Block","trigger":"moondoteth.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polaris.xfinity.com/globalnav/polaris.wc.js","fqdn":"polaris.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.941Z","timestamp":1781399457941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xfinity.comcast.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Jun 2026 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"67:AE:76:AB:9D:8F:DF:A8:95:7C:01:88:F6:C6:49:C6:FE:00:88:69","sha256":"C9:87:3E:74:2F:D6:A7:08:F3:F4:73:CB:37:71:80:C8:24:BD:52:74:83:4D:82:3F:6C:CB:A2:38:09:D3:E0:5F"}}},"request":{"raw":"GET /globalnav/polaris.wc.js HTTP/1.1\r\nHost: polaris.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 06:10:43 GMT\r\netag: W/\"e1101e75c954308a48fbb627c0c76ae3\"\r\nx-amz-server-side-encryption: AES256\r\nx-xss-protection: 1\r\nenv: prod\r\nx-content-type-options: nosniff\r\nx-globalnavheader: /globalnav/polaris.prod.en.js\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,accept-language\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BQhlTFblAeG1v5nR1bLsxMbh4BbhKRQ26qAvgbkrPYQz5ajI8ROzfg==\r\ncache-control: public, max-age=300\r\nexpires: Sun, 14 Jun 2026 01:15:59 GMT\r\ndate: Sun, 14 Jun 2026 01:10:59 GMT\r\nserver: AmazonS3, v1\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211160,"size_decoded":35232,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1101e75c954308a48fbb627c0c76ae3","sha1":"369e5252644371f21ea3ac844bc155c58b202d76","sha256":"ee2afb7e080662140cbf13c098c0fc1ada816f637c07c12fa6ac44603aefbc8b","sha512":"dff84f98ab4868a5a1523eea2463271bc592fe0227f3f867a6da1ad470e5f8d8f318d361b8cc216328ffeee48b583f2700021b9d5101cac94fa3b470081e12f7","ssdeep":"1536:6XMVw5xFk+lshogj18QHJ18KvY9zfsN9cwZq0J7WqM:6XMgFAEI7WL","tlshash":"7124c8351158723a4a235ff2b2ebb311b22f1090dfb741c5fbd2500efec4692a66996d","first_seen":"2026-04-18T11:55:22.01549Z","last_seen":"2026-08-08T01:05:14.989335Z","times_seen":19,"resource_available":true,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":219,"connect":33,"send":0,"wait":852,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-bold.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.966Z","timestamp":1781399457966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"46:FC:E0:D1:88:C7:1E:7C:1D:B7:52:B9:B3:30:69:7B:87:4B:FD:AD","sha256":"F7:95:98:9F:5F:98:FC:5F:87:D3:4F:EF:98:90:14:E3:F8:0A:88:6C:10:E7:A7:8A:F7:0C:17:9B:4A:8E:99:4C"}}},"request":{"raw":"GET /common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-bold.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://moondoteth.github.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 88920\r\nlast-modified: Wed, 07 May 2025 17:42:40 GMT\r\netag: \"ee9034e40cbca864ab03bdfab7ea3f8f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Ofy5R4oRndMAR.EFfuRjwoA12AA4J.7t\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 4nPow_q2YH3AbDijKvcumv15vLX1TuK0yiyP4Lr0i5-wqPa8bVUOEw==\r\ncache-control: max-age=31536000\r\ndate: Sun, 14 Jun 2026 01:10:58 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":88920,"size_decoded":89419,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88920, version 1.66","md5":"ee9034e40cbca864ab03bdfab7ea3f8f","sha1":"3cef49523c4a637cdd09e58037d653b85055d4ec","sha256":"69420c9db91c689c4ea04655f57a0bcea09b71003f21cd5e56afa71b80f049f0","sha512":"eec9442dbd9b6ad9a419fa90054a7fef4ec466dd86c83228db9035ab93570bf17b1235b13da38ab6783c9a67e99c3dcb62f0b355083175071cfb0610fc8ab6f9","ssdeep":"1536:iLLz/aDJVANzAKWeLOUPUldBcw/xHLnclN4xBzejUGBxShP+4J3beUn:iUkCKWNUclwSHLsNtjUQxS5xbDn","tlshash":"d79312d75a16aa9e4e6c25b12971ab30033c53d41d9619fd22d120ceb7f1f1fb84bc2a","first_seen":"2023-04-15T05:38:27Z","last_seen":"2026-08-08T01:05:14.984363Z","times_seen":207,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":261,"connect":30,"send":0,"wait":43,"receive":49,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jezqzfixgomcanhrbtvb.supabase.co/storage/v1/object/public/assets/infinity.png","fqdn":"jezqzfixgomcanhrbtvb.supabase.co","domain":"jezqzfixgomcanhrbtvb.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moondoteth.github.io/wemail-login-xf0auth/","date":"2026-06-14T01:10:57.969Z","timestamp":1781399457969,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/v1/object/public/assets/infinity.png HTTP/1.1\r\nHost: jezqzfixgomcanhrbtvb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://moondoteth.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}