{"report_id":"6647da23-ee99-4c1c-bd2c-c4ef0b52adfc","version":6,"status":"done","tags":[],"date":"2026-01-24T13:52:52Z","url":{"schema":"https","addr":"moontool.org","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"104.21.50.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"moontool.org/","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"title":"Create Memecoin: Make Your Own SPL, ERC-20, or TRC-20 Token (No-Code) | MoonTool","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moontool.org","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"104.21.50.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:52:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"moontool.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-20T12:45:18.885551Z","last_seen":"2025-10-20T12:45:18.885551Z","alert_count":10,"request_count":10,"received_data":6741041,"sent_data":4600,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":6,"received_data":296202,"sent_data":3312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":15848,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moontool.org/","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e53a354a55282a3e5858921d41a123","sha1":"27f3e0f588c9b7c2c744b9ff9abe374943f09bfe","sha256":"c02d0fbe4d665db192f0e54451ea14cbcbac3a9367286ade8fd3696cbfd365ea","sha512":"ec11aa615387b0acc7effd01d34ce7412a5fc25bb718e038aea986e6a8cfa26bb6710aee5a521fa99c9e797d5552259fc46b34cd1d02c792d6850696f955f080","ssdeep":"","tlshash":"955132fb727201b04aef267b238fa794352260873842d559bd0d8f406f90e56747bbd9","size":2744,"data":"","first_seen":"2026-01-24T13:52:55.860221Z","last_seen":"2026-01-24T13:52:56.306257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/0d462100-68d8-4496-978f-42761191765a","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-24T09:03:46.044339Z","times_seen":5088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01fffc454145666b2330a068c4664f76","sha1":"723cd9f9e6174eec91d669cfb4a2dc8d456c3f25","sha256":"03f28c4e62cf43dd07cbe518c584af78795324dd20854528f749d7721577d4cc","sha512":"69fc0cddd71f0ddcbe4b13c3823a9cab25c7afcc30eb933eaf6bf5dcf329646cd0280b0699363227b00db2f95dc988e165adfbf0878a7f77604d99830585d5c5","ssdeep":"","tlshash":"4a11c0b53a1a5534cac5418b31bef7a93e7260617b06e084c3accc295d58e8714efcbe","size":902,"data":"","first_seen":"2026-01-24T13:52:55.862106Z","last_seen":"2026-01-24T13:52:55.862106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bfa446c54b6ac428d3e739a3acfe0537","sha1":"d4e7500d70049d5ae123264b0be653cdbecb76b1","sha256":"e966a5416b999478688072a1efad46bea2a7ec40e2c1a2dc1bb3707a8d149a89","sha512":"9c9d6af4f6bb56109e6f853ea4988a54f65b5e5a4dacb367afeffd19bdfc2bbff83efebd3d057a75f653ab4b056f92b3134f104149f5a72403c94470337921d4","ssdeep":"768:CS53fH8cfv0+ZtlwOm1vELPXBMIeW4R4GLRkdncSJc3cMKcNilqEUOFEEMa3d0dO:Ccx0SwdOPXBBev4GLRClqA6A+TGLfLx","tlshash":"228375d1aa4ba4948d2211edd437ed06e8284923cdadf293ba3dded1741cf62c48717e","size":85578,"data":"","first_seen":"2026-01-24T13:42:47.958273Z","last_seen":"2026-01-24T13:52:56.308335Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/chunk.1.ckwisdc1.js","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"453b7982ed4c9353804f7e2d9ee0efaa","sha1":"50467eba09cc5281ffb2f5482843f8e3667e04f8","sha256":"af3e295546dd1ca694836adebc298f07feee9c09828a534afbbd3f27d3c0d51d","sha512":"2f916af632f02bdd99320cf990bcfe3f9a235b03ea8edb277f541546ce80127e23779c68411751605ae0601f0d3fefa9818f568ea0de9b427dba9fcbe0b85ce7","ssdeep":"1536:Hc7Ajga1ygI45Q9HfyyZog2Hrulq0IdPG/lpB:Hc7AUa1dC9H1og2HrDhApB","tlshash":"298375d2a94be0958d2611edc437ec0ae4284963ddadf283ba2dced2701df66c44717b","size":88585,"data":"","first_seen":"2026-01-24T13:42:47.941934Z","last_seen":"2026-01-24T13:52:56.304615Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda1bfd3f3f7e07d8672e003833ea2b1","sha1":"244a569ac6e2a879dc394856d15877fdee422891","sha256":"79d7ae96541cb53d3a8f6e7f525eb7994fb19eb3d285f3f2cf76ab1e5736c8e3","sha512":"2dac13dc2600cd022acc7e267cffb8c7be5d8ad3b679aca42b28f14c707c75fd8b4c80194c19851b4e8cb5e985d3163ba1cbead394c2409caa0be9b7cee15cbf","ssdeep":"","tlshash":"8bd023d538758c306694024a20f6f3dc36a12150b715f180c1ddcc2b7e21dd304b1d6c","size":217,"data":"","first_seen":"2026-01-24T13:52:55.863951Z","last_seen":"2026-01-24T13:52:55.863951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c48ca6c5f25455021829d28b9ef4b5","sha1":"24bc47fdfb051cec4813e33572b4d794b30446d0","sha256":"522a4aeb948dea83fe6a77655d32030d1585d399768f3514071c869fee5d6403","sha512":"2cacb7c761dc7b05c3b8838bf4bd7f14520f6af2e56e11ef36750340b4a8acc9d2d43a09e39fe7a5ddb9b30dd022b6edcb72c4ecce04759565f0f8ca96b58fac","ssdeep":"384:yhJsQEa6yvARRrArAyDoxloS99yfUWeC4GsRUDa5xY:w6NREr/woS99fC4hUDa5xY","tlshash":"528296ca34e9f16ec6ba683410fb38ebf7ba7a95380c99459110d0d8bdb433c55a6d1c","size":17914,"data":"","first_seen":"2026-01-24T13:48:07.285187Z","last_seen":"2026-01-24T14:25:25.895935Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moontool.org/solana.png","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /solana.png HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 123409\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\netag: \"69730229-1e211\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEua4ngx%2F3zu8DL5rFeSMW%2FjCdhQRc3bDFi1e%2FuLLrejQrx%2F3qMCL%2F%2BIKpja%2FJ76XIXmdLsArnBhMBqjZJnkpHej2Ou6eX6C2nE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002f828fbb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0d8e9a185773da474955639b5fc82808","sha1":"20a83c3b86f3fc904f26dcc59419205bdb0a2975","sha256":"e5721ef7bd05455ed2f842ea2f66fd7715b56cea319d819187907838300618ac","sha512":"3660589a5ef0ab74175ed985f79555b264ff68cf5d2bd8f737525630d59387d37b871d9ed7a92de2250b80ea53b08169f333f1b453303ccfce377ef738291b3e","ssdeep":"3072:1E6pISxxAj7GlIoJPxH6o6CMRHqemhgpeKw96T7u5XOAZ:1E6WSxxS7GlIoJPxafHtkEJw","tlshash":"6bc32945d3a6ca85de18caff2e269dca0105b377f0d88ee8344cb1f4b178d5349866d2","first_seen":"2023-05-09T04:14:29Z","last_seen":"2026-07-23T14:03:33.95605Z","times_seen":638,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":187,"dns":7,"connect":17,"send":0,"wait":18,"receive":13,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":189,"dns":2,"connect":30,"send":0,"wait":21,"receive":3,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/ethereum.png","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /ethereum.png HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\netag: \"69730229-27343\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmLbo3MlOsfhrkVEs%2FrfPQ3SacDUf58v0lEkWLRktna0uK7DiGFQVD6%2FQG0vkbfx6VZsopbfjfTZKasRMB%2FVbLxGHAUOcbmzdmk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002f828fcb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-07-24T06:15:58.169266Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c3002f52f05b28a","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:30.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c3002f52f05b28a HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12139\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12139,"data":"nZxrvUmiehlSmSmHdFDqSdSdHdnednrmYmHExdIrNYlyd37WW1+6cYlCx9jdlrWq6dGiLrlHdEGsmo6iD5j+jdWRjVjdeq06dmUrm-d7WYmGhxEZI9v57Hxm$T7-Dtv$Zrd2aLxZ6IZ02Z7PM1ddnisEoh0ed96NmibM61BlrrN$sM2oEyDUa0Hpa6sdqh65MrhkCdmbVKthesGeAeSnBLdmK8rdLdN23gsmu5PY72NR9A+xIZ2VyPxerAdmqirdDE9F5uJCjurdwJ3C8y2ueddbVpGd0NdmJDgrXNlEadlJ9pFNGfuCa1dduiIrToEiaVD8tToZn6dETsYt8IoddgNweaN+eYEEYESY6djk4d1FaB6dxoesT-pJ526mbTNNsut8xlcPbc30DgNB2XdKxGuZ7cxV4sBufDlxWRrreebpVAawde58pvUCpkTIsJpw6OUiGC9GHEGA2v0FBM6maiErdlhE3yxPe0WWjH-gc-OnWS+uIxg6SnTWJg+9bWPXDa9PqKxjTxdY-NU2b43qGbKRUddkGyUnS$kN2ya7N7Lcx75V$fPzlqr7jMSEXHs9$t1ZB7Nlb7Cst7rKOyte7n$w$Ylf0W8ws98BhwUnhVhmstMrtpRLCalyuoE5jb0FihpERTIaumwf6cp6108SDoVVPhjuZAPweDiMIrAoyDA8ECMiDIwpuArUpbpOrHLZrndbYdbHIw0r8dwvSmjVU4pU3PH7n3AI9BcoLVBqgoBpatnU+4rE8dafSUDpaoBOW+SHvRRx6jlNg4dl+G5UkUvepv6adGnaUrtu4Ol+UzJmrlYcI9lZWRx5rqRwHWnoyxZqoPtUFOpe4Zo$gd-F7dx$dMFi9mhvajU$xYjoelYUppn6vdevsal-HNrF-nsUFih6bGIn6xIrNSYrUex70RuxDmrvaYrsVMpx7pdhGs+6ZUa15jU0gddaAgx2odrjgbjkUctBgx8rlgdOoICh6ktN58UMH6jUJc5nFnJ6iCk4W9dGexLmJgxKEXi5AbU5$X6vhNNBPDr6fGlnZ$ZWuPkuH6-lZeU$du0WjCb1eByv5$0pCh5mfm5$qaI6u1ElFETNp9UjUBns8IdPaCyces8rWEjT$r36ct$c2AsobBblRindeH-lmCdD0VDeOveDrul2Wxcd0Ja1GsZoOH4zojrGnlSDpUsLecDuveaS6jex+Y2USWMze2zF6xruFnnBMnflEh6YdstaLD7W69unbs97ENlYmbHFYoU1FOTNlvUvOfZ90XmWaeLhxe-UhagSyn3zl7hFhnvmMr0reughrmEKBXxi2pk3sYeccE1Irh6Wa0Fh8oxU4$rgT2PGCC4SWa9UaBmYYnUNsUcEa0cYm0sXS983sxrkgdPaPYX9ek-660wOsjU27XjIZrlumPOd5EziYjrrBYhk3HRxdeZNPmZdKadShxcJefrBPgNYhaggXdXJzf0+FZf3e0vD9drsxnUgWMUz$Z4wW3mLywRIL-xkILBPME4UVBcNni8$rWMBX$xeBuinztA1gS6K1po7xAwvLOAjr8aIlzXXLjrNdTADdSYbmdodT1is2lbmrcrmrxmTMtRz$P3+n6klMj9d$2rRmxmtqgmd1rMmIli5jadgi6xVaRwyl$7s5YKJSVWlvuKdd83sh635GdlNEHBgraSMlBDxgs5IjIV5K6G-bChuIIlXFqrjW+gJDqBxYiLqsxrMF2dBtrlHSUOYp6Oh6i6MerFgDNm3issEg8RU9-Y1sDmV4LcSUM6zD03ciEfgxJaYWi39Diibc7$Ik53se6VxWl22F7li5EWY06fe+fscemNBpMeaDU8p5HkFNpEDV4$l9gpUrldEescW8p6m5DO96iPuemoSx-dhbUvSiRsuOY2xPb6ae3lde1DC-FNrjcseJ8E-dg3Eee1ep7+JNrIcUY2Sdfd6KNseoN+W00pFHbOtPYrUrmt7eVlF5rxIlx+F3t3bO9dGryc8mtDVl2N4bpVrh6rI02ZVvCq2fr3aXtPDCKgT7R012rg0HybN-mBplly7x1Zw$V3bxdnWUNEduxPU4E4aF80E2xu$Fd-yMS59jWi32y5HqXFZB0klUe$oTxPKrF0YS416Or54UofCw1GWHjrCYEfqohMsOW1qx28Vx9wjdFPFfVYBLxsk9U22bWprdb-SUVLnVPGHkFYNb4BPwrLKneujKGgRmCeFPDjMFvViymY1FbG5FUC-Pru82I57vE456MVywxmIBgxWMDNfo9NnWjCXT8XioemS8qRps0rEw1xypkwrGJgCWeuplDksvuYsLtVJx9YO6FzP9mgOWxFPqcWHFYChNkMPM+FJOSdtSWcUL0hS7gVOMdCuP7xm68IGR$4ktrbbnnxr04+5iCnjVnujc58xY5GvCTp73T5D4Iu+bj+4vYT7KdP25+VtVr5wWvPFx2+sZ63KYE6adDMk4t4seUNH8sFHLhEBnntCx5u00ygyCwEdPbyOxBCou4Ub0sk3fx7+FYvU$IVfX-336NCUnJ79bm5iy45EWji4cEgS75hamvg4nhy-9dXBHFdvgDCDSadtLsg9+5jIKl2lUUMPaadJBe4Z7deZ1bkY03Z6x4xsvXy2K0-bkbTp97iqJ+G8nsvV2dNEY8RDcpdC0Mxzc0Om9UTqAw8Ynp0he4Y3O$msVtVHO5amzCYY-xCNPzco39cj40SYf06Dq0e+G58O09e9TqriwydsLmXONKTmPIYr3NNUl+Z5g3p0g6mIEo-UW+yi9Vrm4x0u5NSd2XaLdUv2b48UUxWI5ign9emxDN5RqvV0cDJbnsko9KfOCckt45szqa+PPyuIETiCNmmUxJ8kKIUMWyC5eGxmtE$lYhEljHCOVnCXKaFZJgfySLDP1pblpVrunYDPfkLNT8kd+hhO6UIH5mdOyn4Pz7SHSayrTx+3mpwoIKKlenks0mScB$KYN2IdFg5VzSoswIPHHqkYEEZ1lBpLvwVUXqLRByHKuYVqNLN0eMfSkYkohht-vlFCdNgwI4rScsD18jv2RtSfOR60jxC$Em1Isj$WJpguZjaAWX6AMNqUmC+4YqrJvH52UbaG5FDNIEYidJAv+w7vXcseEZqX8KeS8xaXePE3eOktI5XCboS0HKYjieBqZGyEXnvuLC7cs0mmnw7ouodKifoxJqiVIPvdChGNnugup-OK0429j80xnuT6Kk0IOPwO+29CYmW8Rfj7WF1hZjVPII8eLL1CWUojIESVdqPFvv1vmqFyV6h4fxx5+z3Nh32d+T5mVY2+BmJts64pH4BYpsmlVuP-jUMiGm9aSRVEOPofkkwzymMuKWrYImAtnPIgZnH$RfcvW6DVNx7ZHfhj0EAyT78lh6Bcrq$JJ4$kKWypXfuB3ok$XfrJDXRBY4RNNPPgvm-YUmmuXvbarFJrg6gkeJB0LhDk4omlKxzKRwaK-WRsOx3w$ZxovKL3OYylfOJvrss3EeS6aZOOf4UR-v7eS0LPSd+sy4e3-r$qkYvjiqMVIjbkKrOqGK2mxskeEm6UpKmFv3xYbYld$8uaLd1eZKZ8ENbWnYMU6YrNH0oqX8opE3EPa0Feo6bG9xXe8auqFOrYXe1mDZnpL0gx6v6clZxI+eSmiZ03PRS34UO3OPSWEdY4pk+Z+F+Z3lNdyG0lzm6I0wMObjwPxVkdeeiGm0iNF3OKZKYgegOO6c-jBNxgkYVWoqFjwc-eKxGmj6nYg516TPqRP8EO4IJjOxppsRaWm0Csaw5Ub3i6CrajsolviePpHYfZBafRYZFVXPw0ukxROV147vSGxrOZvOIRbvFRHj9gTKIZ4cdVCc2N3GNekNxIkq5xWo0gWRIj$g1YvNC3hpqdBGieNeo5KWW58qNK-I9NzgJ3zNrlSWOokxsqpVBobgUZyNzpKr1lBqapMxzV1m3YFcAOwRHO+sMmLRJR0P1Zcxi43p+W64GdGwCqGju6srSmaYBGqqIRakkrhVfNF4ldVehZZNjKBdq8JZSp3VHj3c-m586tYYIVbsexyeDR8pWaVZIYsrHOo8HY3e7lavd3xNFRqFmRStAWiv6IJ8HqGP5lxmAN1jged7GYnF2m95m6Ipo8IjGRSatlheklZO18IjwPi6npEst5wPDvsrt55WuR3Oe23K5WKGpmrNM66gOaMRb0e7UtNeEdTs1NeZsrugplpodVivXKeeivixMa-8p7n65cVmdIUGmqC8UrqGilhe1l-WhvdVe4RIwFNNXIuVpYsqKRidRZS0oqpP62MtavpommdcsomwMkRUjpNe6w7do6UlSkTmvKmt2lXNuREd9KdIXOEObj5kixLlElw8L5o6+uE2G80togdPP7k2sqXlilBlj2f8MPUge7K4$a2qdo00cY1etYrI0RSsrOmurd5aVlfG-2KVH5FkGj22ppF2+6awV3iePwS4ldYvsrKq07KWalEZDRp0JuWV47xu5l1mjF06Dt64e8wcVYWcKxnYNRJjP2JwBKekLWAmoK43Ul-2pudCYcsUocr5xrJqgmYuEWdUNdAjaPbd4NhNN8dTPNjwr5dCBoSdKUS6-gdbDZLZBT00Xg9sTkbtrZ$uKa$2swv2CU2agdTPp3cFClh6CrwqiW7N$cCGf6GF3u6b$ZsCR5Rk8KfGHVSRRNllObBmMlgegt3kh2vOrwFFhGrtU5wOL6FjJ6pFXgVCvd$spNl0pggs$sGtN4rlprBmMa+TdgwVSdLROTdZbkGcBlG7Y2bxtj+jYsGkTZnavsHE4cX5Pt8kxUqGeYt5b8l6qtFWEc3kW7H8rKxUypMmH6jRb0xjXdLe3l7lbw+qN3+3DjmdOgXusw9FgTDFd4WqJ4ijvGTP-T+Yyxz6dczCck5lBKZlajsx8ExUlZs7Vv7ecgzNsUTaj0aVCcqkHqzCqPy20V5U2UmlimhqVm4NqVOaoqlTJ3pU3dqaZqa0lcaW5mEm4Crjv2I4gO0mFGH4HOa7UZqqd77jZdjbu6R422DGAm5daxPpNmJcqPoYjdndSeiEP6-CNPIp-8WeMTrt-efRVt0T3xOTvgdb5v-2rYqCiuMCBO4F0lx2HE$OoZ+OqEhfag36lKSy8scWuP23XN30edlYITL7tb6U8OogoUcRges$p3Fm9Kabjvn8O7I6XNbkkUumV3hb6vIsbx2$UES2zFnbNq4OLklPIFrym0jdzppdW6Lq-4+RNetjYG9b9j3b0cH$9gj2gyEkdoovXRoueuTE$apVZV8GSE2bpV0CKgCZajc8kmgd3uEflNFjdNOqBlUlFevlLb5mE0KEAECU7KD4CrEtbaFag26CHq5dqghC$54aSdGc3xtuRkHKoerKrKNdUNbtRRItoNymFcHRH4-O1lFCMWhpzsT7vCCY+PZ3huBcX5oYlxXOmqj55eq4rKTVCN4yOZZ$puZ2xEjKnK0eaTBmS8tmwj02OaZC7tLVpkos62+$+y1ePTI3JGO3AwglOPHBJWuThFNGmgEx36V7bRbZKaewq2IZWC$lDp8jg0FKzyWe9o9Ii2xtr34rxgBl0P$aL0glfOacV8lZP5g5+udgMs7BAm5c+ub4422be2J8xoHt3qaVDByZOKnYnwNPRTItdP$f4s3mXsdytCBDipkUW$2Eaj6uVlEvm6zTpUqGKkdojpnGT3AevvqFLjFatcT4nc-OXwXNZ7Es9BOc7dZPpngOBlkN-TnqGtBesyePuFe4wa42j6xwdTPZs7ruFsXdXlAdV88ObwnBNsZv6GVemnkRyjdEsUE7sUHqwV1Ckm6PLF-xtgr82IakaI8DcBreI$hFJjOHpdqGSsdPygWmtmsKcq95HhLl4rU4yBrt9WFG-tLgllltrHZy8yEW5x5yB$ItB$N$hBSB3WuBulge7mk8CTiRI7UDsxBNbboT18LjJPDVqwJ3J3jub26ReT6ZqOFaoqxZ4Z7vuqw3d$D4tN52fuuFoh7m7egTwtiwjFhls7hb5kBrcCdEbp3GEeTpFd95F$4O8OC5skdVCcj$On5u5ee8gj3VJ2jcSObwJfTPVgipgNHlus-2h5ElhcdrjVNxVepalambq6m8+H0u9t5fC8RrM6LnyYzdrwdbeNiotym6Mlggeyd4-favAwBE2CWby5Yam6PF00VDeIv5UCI8MOK5PYNDpDTnVefHFDouYBUe0BylzTsCi$NBU$36KFsE9TT3JyXyEO4-oqXgNVhbxwaIdSnK7dxHEd3$WGgtyu7thE$biL$Bs8M+hTHPEn7Bmb34Psas-n3VpknjXFgmoKHVu$BqoR8STkw-UB2qVbbydZHTC4XmoY84vWvWUeohPThpqp3P$t$hjwMaX87P6Ng7Sy5jBN3FLe1mSgUnbeMFHu8Z7uPfaWuD-dIbCR+bXy0uuc5BOhb$S$7uft-m2qu0V2MYLV-NoH-4P3Kneb6R$7BUkjcvn702OTdhNf$SMgnjfgLBbZuKoOEGLfg4f0Ue7hym9$xc2$Ue0l8wHKk7Be-RzTVZsrJ3EjXpSe8wM6BnipLmJCZqdU7fKfxr8nj+1l1vIfB7ufBSVBbHSe+eX7$+Dvll0dz0xIrBl4mlkfI+N3+c0DHEDwgmfDYHZH9GZDfOUYi4XqW2ORClvdyddybRSHN3j$hnRLg4lHVqi$WSKFUfs1u$baotH$p4UBUmWtEjw0d3W3kxm0RcoYlyeyzTBeLWuLkcpUkZmpZ274DvT$kLfndbu7UczTtRn3j-v-kYJVCebR43NepW-avlghe5hP77H2d22YiVUHKvw90aAuWt-IZqJdaKCuxrtchLyHSkcSfSZ1KsuEbvFD15+syf9DnnqCgbU4p3PDVHvv2gsJ7HCqW$y2OyZRKWkqMBWLD$EE1KExrIowkmRfJHWlh3934ajlT7fqu6gTkqr+GHoC9Iqh$lCe-9B7EWwtD0c7LRxTo8oozLsbNZ2jU+RfhJ4Ek2fuM4RCGvGv$Pj+oHBUa7VmRj71IEP6aRFDd4eL24apwbaV2OteMa6-EEq$AlWv5ymBUV0CwqkCdCmTkJd-AKl4l45n4cAe5OWdd3g0UEOhpET3-t7dehys4Zm0KF7+INRo$TO325d+hbCy0menIpzn7KUlmwf-PLj5jmfLfBx4+aw3zLlKDk4EbHy5f18vLltSNMnkIu8N$v5B98pdBD4BOPESZIS9M1Ja2MC9EAf+rL4ry+1dSW$fVmUTxoH080pXbRqyF9WdDTVdgc9897rEyDRwoUufv1Njt7mY4P0H54wcsIkq5RipxYRpp-eIKFmWxUlBWZiT-oxd+1bTZLtCqmoKXuOGkukmVtSZkRfOkUmlVdhsm0RBSiu-8iAYwiIFbbkkg1ckRP+AEm9NoVX6knknj6Vhroc-WC1mXKl7TLekKPT2-u-u34++bR-2gqu0s3u6JD0hRV0HILoW-nFalxoW33YErAbpB5ptXN2yJXXMHMrl4fleVL991wziXxEEFVa17gkI95FM03zt4N355mXxeXh-v$iB2$P7eqkMs3G1bWyiKDVmn5UguTaWky9pB5O70ePXAm5PkUoc0Gc1yNGUWlkpFgsdrf0rtN6rdsF920aeouY3UIUpdruN6g0Sod16qF-RdWR+hNpcPmNrG7S0gaGdIKivn$yNpCm3VDepg-NsUjaY97wOmrp007pYn3rvbJuUpuJ4$XPz491YHMN4lsuV4zs0bdaIV0XsWMqf1YWudnR10Gdzsx7N+yqKih7M9d1YHhddarm3Unr8Pd4vylUdL4y-nglm2ENyJYY3bHxV4xprOeMr4ODpvgpElK2FSzrS9e4ISepxXxX21dk6su3VeXrbSkZle06WtJs67EdqexewIEEodEnp2HNHFp0l5dB6VgtUdgmaea94+0x9rIeUalWsM6BT5$cIUErRYB90GHemk5R-EIa6MNIWmYgNEIBW5i4FEhgriPkMF6MoHXc8enex6G6odJg7sg9aimhgiNHFeDW-eXrwrC4gdcgNbeaSR6-wx1BtdbeJBEa9N+bt7gf2qrYr983D0ldblEgsNJm4a6y5UmJHE8qB-4FycneGID2eZ0Top5jehIRp0xK2WleC0Akj672Pp5YIojtN9scZpRlzd1eXrFNN6llyPOEI+2+EYVWX5e5RmUY+OgNYYCe5plk6exu3IXNhknE89v2nN6Pra5JlleE+DNYrp0516mrhfWXgbmWgxoh0TBvccMkpIwaadf5gYWpcgdSW3+q6UNx3gkg06skpimkHeeqNY4q264LYnBIJUbPrrgnJ2JBe1ahaP0i+xKWHNuNiqvrq75cPeh2NeiC9KOhNKGcd5Rlyh99mOnFeyUa-WswxRkHC0y6BU8Mzdf7eCpeaIeMrn4UGPp5mgNXFI2renPpeEgsaL0$rONi7tnc-mv0xYckhMvlN0oT0LpKKrMtpccuVdVsJtDxkCNH6qeYdnhCgW7gqoKx9HThJNfkcjUzYPJxSELfmdNPJs1Bpilsm35sUqrorX646eImVmzx$6o41UI-Gce9Ic6$xTTfsduJxaboF5UgNOU6XMhZsBNbBFKNRPa0ur8uh90$PSUwafdmSKHHIlzU+BiqFUkykfgFrqrvEDiCyhPdKrResOd8hExlrbjUa9slHkzE0lolX7ZF1dc7xMri6wImw1OndykN2Y7BZ4u6n6lYlD6jgF2dn+eed2rF+dEnDkPM5MpFrhZ6t8YqyoruAl$dOlYnVZgfccUq2CN7+Hed8IjbSZCavuH75mdLIadzdd6HY5Kc4MbHa29FINDhlqZhSVhk9v2orGh0srnrncx5tYut6EY3VTpW+0NdepMd92xxHWWdmc5iVaUePvWH$jXs+9qLCyhhU0mS5O7o5lumVfW8OojdRDJfHYc9ezuMdaAxMLFNvR$dby-qDqru5YuOZ0S4DesHAuzmVmjEXheyLUfMegqoh6hnGdjgXgZ5Vm8mhNd0E4pSpNplrokxpyNmbdwWjrdd5xlmH6tdPsnv$LFg4md-4+-5xrJPs55gZrd0k-Bh3Bsc20im6T2Ni0yWAm+Zitd5HHFwlK2Uxnd14novL-5aFE+r-UOYxkZ+NnrrZd9BKKZ-Xr56HPSe52lwe-xyzb6DUTMgxIqzu3EsTSgGaSdmPXNwyPHNU7Xo0IO8DlUgg+V0JA+f67rk9EXNHbk63hpxHkx0lbaBaxYJV0zBd7Cd$PuxhuHkhMO90a0vsECI-gDwEIgYIdT7HkD35FxDPmVbtUsrz2ybgCf6ZNxUmHP$o5ByLiNd5l$5bpfPWgiEqegIdJoWsF2NahIBf5so7ddEdqhFHkcRU$dMZ-wijmFjEGk6PhuNdGDFeaInxnWhRrSmeoYiLdurc4goUoGEoAm9mprHyvrjFas6drJ8kxmbNIIarp4wYWENXNHdw7$4CrNMl9dbxxEDB2wm4cFlnEaxnY7+djm9llFHreWNy15$jUkbLSo5pyinH-7ZJkYbddC8bdSUpe$79dmOgqetrH0lxa2JyC-5ClFF67xdKyp+hMdSdZVRSI75cWbxaGCdora6kYNelL-FHl2EZn7IotcYKYgi3ZbRkMp6492tN7HKEcLrqOYY7iARlcxL45O$dFdNHKtkzIlPfqRYSkvCvltnGyjAnH+EH7poD59j76mHvRkRugmXH6qF+9yDBI$G9xgCk+ijkU696MCqfkWHAIT7H0dEADJyqYgo25Gvd0SmsHRk7Okd8mAumOh1xW0VlHjaMjwHRD$PfGF+qEv96TD$Pu6rhYqkydADEloGNrl2F4lzbDt+GAjZrWNhKWYldki4lg8VcAn$RcUr5+LbCWfxrTlGZ5DjCz6TnYU4ErSl2m6nccJ2kd1OzezH6TkFuTjHjf20nlKtJteljjBeurkT$AtBv6YJeGY5ndv7Sk-iwMMtL-2VrMaoSUrJZHJr-tjMadplJypd4xWPbHjbNLXHs4akBva5bSYdus3Ts+aa5$HmS9RDIuUmt4CIHIpmy4Oxr55geMbDzTNTZe1jjUyB9GghCJOXxxMeXlr4$g8aYjFh1miZPSedkp5cU3ygfeibTdK2eiJa6N-F7hk9YxpumJZPeCrk0jZpSGDfv4EP$52DUyamtI1tz02uxp$W8ksvtodPqh4ZYvYPrbJmMuhS3Y8ZNRUmONafNJfnr3RobvldwM$rvJU2ak5I5GpjiSiU-rFOEylw8mVZ4dN5O8HaO8m4BVBT5byYTShzqPowCEav5geAdIG68EJOcxxSrrPwI8EH0d03GglkSSCEKvHuMOG+CSPJolkkeVMX9FYNVE5GOdq6gsnj5Mr5GVZPOv-DTNYTDk$ENk9z6TnmgNdUuaH99nYBUlAviVg-HI8e3eITvOSl28rcNN07JOcxMktmC55K5vX2b$B4gK6DxC$mXHusIOlhelOEsqiTHvIEjv4E6PUbMxJSCxNWbyGYpaHER+RDcUWY2zl2kll-eqELMsZgi9ODBlOIeOlP02TITMDaEHbIMKBCa9ecl2LvDPN2TZlaN+5pVzZJO2ad0BMI6U5b1stUcae0m1Mh6Ns-ICMhiopOh82VLYcRWnTld4bNSM$bcWMC3pGbAUzWYry-CEIhaWFTV6JonbhGc7IVnBq6WlemmMhskkSFZP0ZIVXrPpogIgLutpG5qIren6je4e9OobDS-$0Lxl7Fr2$-dYHFtDFE1kqrHMy+E8-ouWGB$P8uEUtv4l9mO$f0NbJalGbqVg$A29-KO3uC+a2Mj8S+9CS3u$V9$zV2y6fhKbgVyjcXNJEHogbn30$hpXn8H4pCGVIB2pMJq2eHbkVPjKinJKDhPUH33dpM3Icex+EeVubqkqzE8VvElVOYGz90d9LYlx4L50VUzb6VKEfOn$-VRjE8-1uIsI+cwazC4c17tVubz-bJK84rTfVubNe7JEy4rTGV4nSe4WKmPAkxvsneeZiiI36CL3buCeXnKrSbCyVe5qVx$CCVKC2kP5pVUI8DmZqnV8518Vo1xsLCX6jeF8oI974ZCFVobfej3tsPfkevXOssy$0xVDTMKer2USJEVP2CRE7nMU7o9aVEbEVCnVUUX1$UEYJOubyUf0CHkbEgkZSHwXUWWux$eKK0sg4G-Y4GtpKbnU8ppLC3UE+v8uygtaCm3sBzvB5IgtaTd+xBzk2no7UW8IVM$7qxnv72WFmVnbWv3nnrKW8+WAEm06-LV1205+6BuvvbjptJT2SpybmTbF8oPTDnSBqKuunwGvqFgyTRpubzCX7NqP7Eov-$yC4$Ci-gEVKKbnCO75hLFEnKp-fpUXpi4HEqYynpVo3pbVyb-v9a9OOrHS3w$Jv7xRCAqp$4+TP3B-Ks-UoYeAcwV5dAN8YT9HC$wq+0mk60JFtMahdO5Zx8slBuy$Mj0n9slieMdqgEIy$PIedH7eVmDmpuM8AOrzvysGmSkzs5wdxgDjfSJ0dVB8YTdxvfi6IzrIOv+G97P8N$Ly+NKg+emD8E0i7ae1yGjEi3BsDr0qexNrddmwFcqBmxO5aMdjVMvNMg-21-36Y45MertErwxtryUlpH7gTpCdlSFsmtYY2NoPrqkH8rddp3dSdMd62NrU9lRmAx2r9i-8lew+N74lNeY9+n0dLmYIw2kVKYofmpRwaM+Ldm7lym8mHJddeIemDrdduxv+ufimyURbJhDYmYdY6oJorSdgpo5fJdWJ7HoTb3+$BCw8mxrFt6pNjytInJddK2jBCw2NA+$YNcSj$8sYdn4ldW3L$yiwdhwh8rWo+6m8mFsO9jDqG-26GmlxVsFcJdNoy8woJDjYrhDgUFPrZXKdeU14dzymdoh+$JhxYddeB-xnxbv+Ylgdrb9ZHLpsNKBldidb25LYeV+oCI2$Xd0rkf4Zm66Ue2Z6wYsHBNkI36wkHA5Rfh060RxcZskdgtFdVIYsX9zU5INGu$5nY04M4bD6peTp4jejvad$dKoPIy$7HtsHBgnr3R1Hwxpd-85af4IMJIHMn5mg+Vcmvd$4gZNA+duiW36O9aD0rNFfe0Zdf+7BWddGlxmxdn4mpegequZYg4F28297dIphwWPuZw2bmcmktuU0jN+xD8m9mX6odvdndaf3sd7F9dNz9Bc6iXCb0Ul9d9BWhDbCR0BqcdXhddgWPXHmkeHJ-DqBaEJmflcJoL1yppeJLhxsWoL-e4aadLUCZdd5Mbl6dd"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:30 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9c3002ff38ddb50b-OSL\r\ncf-chl-out-s: Ve0P0segoMWv36UpQVV1Jg==$EUvq8QTVGAwpkUL7Bnx7lg==\r\nset-cookie: cf_clearance=tJFyDjm5IvVvBc0_DogQU_W5jGdWlzjcsgnnTTc.WDE-1769262750-1.2.1.1-ZobE90WD6gUk4xfIO50imO8zkQy82PEKDN2QN3w27V.WcjuJ_EcW3WPgRwr9uWsxlP7hrpuWez_mEsDF9iRrQLM9oApdc1G.jMJNlOSs_Mxb_mk.kkjDa9nXMYrYV3TQsYonv599lVbzdhkQ1liBnwWGMeMEH_JG2rNC.xkeKvCIyvVx0yCcFCsMbZiRpNxpts2U2CYWwkxGUrebmyNOwS6gh29wkbLfh.adJ4QXYvk; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=moontool.org; Expires=Sun, 24 Jan 2027 13:52:30 GMT\r\ntiming-allow-origin: https://moontool.org\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zcLLSmd%2BL0YS%2BI5lf5MtC4o5u4A66Yi%2F4KRR6rjiRJMmjTOG5joKS2cVP2Z5f4tfYKDkm3ltNX0y%2FAyWa2g2x0w8vWglZHPHWXxXro5kOuOPOj1bJ%2BuJ%2BYcVxdqeasQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1804\u0026min_rtt=925\u0026rtt_var=1280\u0026sent=500\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=562662\u0026recv_bytes=17376\u0026delivery_rate=10754664\u0026cwnd=132000\u0026unsent_bytes=0\u0026cid=65ddafdc949af7df\u0026ts=1395\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T16:51:04.15564Z","times_seen":17507359,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:52:28.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8F0JRbwIq32utRw8R0LWQ%2FakQI1ljyk2qDcdmRcVoBtpffHZ48QjtC8KWDiiIvYjXZb57ZO3eRKG5kUepPdgQnQ3woOoj54Wrx22%2FA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3002f52f05b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34087,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10298)","md5":"84d1ea5fce8652cfe44b212953dd9da8","sha1":"79ce8e77f8e1d1e594ec0ce0afa148e9861ced32","sha256":"20d16eba1733663a3c0f6b7cd96b79a94f355320dd276062ff2fcb77d7e4e2ad","sha512":"84b5833a02d18a281fdadac5322c54ce52872ea1ae7a0c0fcc431dc886953e1b36a06a5192c9ff0f1fed3103332c2ec5b40eb5d7910f7cf07fe651aca42f35c6","ssdeep":"768:/Uop6XEenlJtNCXBZZtA7S2AfDRhMuXbEx/a:xUXEenlJtNC1K4RXbEx/a","tlshash":"bee20a75a0a06034b113a0f667e9a79e3910e103d9135799bdec85e8cfc6edb893378c","first_seen":"2026-01-24T13:52:55.854341Z","last_seen":"2026-01-24T13:52:55.854341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":44,"dns":27,"connect":1,"send":0,"wait":229,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 13:52:29 GMT\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-07-24T15:44:33.58414Z","times_seen":5426,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":89,"dns":2,"connect":20,"send":0,"wait":35,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/chunk.1.ckwisdc1.js","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /chunk.1.ckwisdc1.js HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\netag: W/\"69730229-15a09\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cDbI6eCAuba4Vi0hfTMQ%2FInnMwn9Oa%2FWPSS9%2F2FCBTJ3RFjZASteGMpySre4jYIgCPv9EOs0WAc7LLtrES1U4knyw5LeheyE8M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002f83903b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88585,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"453b7982ed4c9353804f7e2d9ee0efaa","sha1":"50467eba09cc5281ffb2f5482843f8e3667e04f8","sha256":"af3e295546dd1ca694836adebc298f07feee9c09828a534afbbd3f27d3c0d51d","sha512":"2f916af632f02bdd99320cf990bcfe3f9a235b03ea8edb277f541546ce80127e23779c68411751605ae0601f0d3fefa9818f568ea0de9b427dba9fcbe0b85ce7","ssdeep":"1536:Hc7Ajga1ygI45Q9HfyyZog2Hrulq0IdPG/lpB:Hc7AUa1dC9H1og2HrDhApB","tlshash":"298375d2a94be0958d2611edc437ec0ae4284963ddadf283ba2dced2701df66c44717b","first_seen":"2026-01-24T13:42:47.941934Z","last_seen":"2026-01-24T13:52:56.304615Z","times_seen":4,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":141,"dns":1,"connect":13,"send":0,"wait":22,"receive":23,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":162,"dns":15,"connect":17,"send":0,"wait":27,"receive":3,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":173,"dns":11,"connect":23,"send":0,"wait":20,"receive":3,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/secureproxy?e=jscdn/getFile","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:30.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moontool.org/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"sdlr7keqbj28p0y6cnyy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeScf8ZZsvj3gBocUe0Iy8jwBT6wWF0%2FPfe%2FOXj4WMtL%2FqLY1H2DmhUyR3Pktb22DH97EHjoaZjukqGs%2FsycVi%2BcDO3SvSTK3%2BgDNBGZB0ScZw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c3002fd1df7b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6079902,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab3b6501df38bcfea299571cc194cd11","sha1":"c51f8c551031d29a892d2139eb9586b7fa561a87","sha256":"466a18f8c01c8f04ae0f0516e81e17e0c5a2f256aa9bb7629f936d97c831ab8a","sha512":"b0f4635872b17dd8d0fd44b407dd84f96184d61d2e8e543dbf8e88c0438c2d963b53bfa27ff161f7121b64e3db712c06fb11db39ec1ea85241248bf641fd04ee","ssdeep":"24576:ma76sN+sGw5GoFoXzGA7aNewFMcLKk6Y556Y6q8:X7nNv5GpzG2aNe3k6m/8","tlshash":"502513eee017a4d32254d47771e62edda84f506ae4d705fe0a85ff0410893f6cae8ba1","first_seen":"2026-01-24T13:42:47.948074Z","last_seen":"2026-01-24T13:52:56.302119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:30.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 24 Jan 2026 13:52:30 GMT\r\ncontent-length: 0\r\ncf-ray: 9c3002fd0debb50b-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zb9DZ69lNVnmjwbX2Lb%2BgdNDlLvn9pTpvmAJKs%2FbYvQEKbY0SrFdkV37Q4DtoBZ4MkxwGxLwvcTF32lITH3PVqM0waJJbnAqS1Xca%2BUr4o39pyPrAm%2BNc4NfO4pDAoc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3133\u0026min_rtt=1143\u0026rtt_var=1815\u0026sent=468\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=537149\u0026recv_bytes=3890\u0026delivery_rate=10754664\u0026cwnd=132000\u0026unsent_bytes=0\u0026cid=65ddafdc949af7df\u0026ts=1043\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17914,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T16:51:04.15564Z","times_seen":17507359,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/bnb.png","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /bnb.png HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 104712\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\netag: \"69730229-19908\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S7%2FrCAyzB2RN1ISMeMFk5DBZ02zrtxo2fiUGFix%2BZedfL2M0vRwUNfQ%2BIwbksPuO14XUKmw5tMrwy8vYxGil%2FVgB73enAVVkXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002f828feb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-07-23T14:25:40.404337Z","times_seen":322,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/tron.png","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /tron.png HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moontool.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 103975\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 05:07:53 GMT\r\netag: \"69730229-19627\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D55pH4kSfNF9SlQNOQQloZFiYdQk0jSEO5dePAGC2Ep3yr5wKe0DcuDHCIFtz1EIi2poWQOFfjJSISfU4K6uF6OOZMXBRObopLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3002f828ffb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-07-23T15:04:36.580382Z","times_seen":555,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:29.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moontool.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 17:24:53 GMT\r\nexpires: Thu, 21 Jan 2027 17:24:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246456\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T16:51:52.485222Z","times_seen":245416,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":45,"receive":15,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moontool.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"moontool.org","domain":"moontool.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moontool.org/","date":"2026-01-24T13:52:30.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moontool.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:03:19 GMT","end":"Sun, 15 Mar 2026 14:03:14 GMT"},"fingerprint":{"sha1":"F2:66:35:A9:17:10:28:94:51:A1:0F:25:6B:72:27:A0:71:76:E1:6C","sha256":"E9:32:8E:DB:6E:99:2C:F3:13:5E:62:B5:19:EF:F8:5C:29:1D:60:9C:44:C5:70:88:77:05:37:BD:F1:71:85:61"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: moontool.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:52:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cN22I0SCV4GhTADl1Vcy5TI%2F%2FjENlX3aQ1nnmoWi1zOxCtwSDn9%2B0bRtcFsGqJwBFBkH8hiM%2FpGhgwOmv5vulkunTbhYH2cqNiLVZgIdKHDAcbX4B196POdCb2wiFQ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c3002fdff21b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3035\u0026min_rtt=1143\u0026rtt_var=1558\u0026sent=470\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=537903\u0026recv_bytes=4202\u0026delivery_rate=10754664\u0026cwnd=132000\u0026unsent_bytes=0\u0026cid=65ddafdc949af7df\u0026ts=1190\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17914,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17914), with no line terminators","md5":"e2c48ca6c5f25455021829d28b9ef4b5","sha1":"24bc47fdfb051cec4813e33572b4d794b30446d0","sha256":"522a4aeb948dea83fe6a77655d32030d1585d399768f3514071c869fee5d6403","sha512":"2cacb7c761dc7b05c3b8838bf4bd7f14520f6af2e56e11ef36750340b4a8acc9d2d43a09e39fe7a5ddb9b30dd022b6edcb72c4ecce04759565f0f8ca96b58fac","ssdeep":"384:yhJsQEa6yvARRrArAyDoxloS99yfUWeC4GsRUDa5xY:w6NREr/woS99fC4hUDa5xY","tlshash":"528296ca34e9f16ec6ba683410fb38ebf7ba7a95380c99459110d0d8bdb433c55a6d1c","first_seen":"2026-01-24T13:48:07.285187Z","last_seen":"2026-01-24T14:25:25.895935Z","times_seen":13,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"moontool.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}