{"report_id":"86761f9e-2362-43d4-8b9a-d36855d000d4","version":6,"status":"done","tags":[],"date":"2025-10-09T00:17:12Z","url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"title":"Moonova"},"submit":{"url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T00:17:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.moonova.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.moonova.org","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-09T00:17:13.611087Z","last_seen":"2025-10-09T00:17:13.611087Z","alert_count":3,"request_count":3,"received_data":1501727,"sent_data":1351,"comment":"","tags":null,"fingerprints":[{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-10-06T03:33:36.947933Z","alert_count":0,"request_count":2,"received_data":1365932,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-04T00:30:38.387155Z","times_seen":374085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.moonova.org/assets/index-lB_va8A2.js","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50dfbd31bf5fa347832fab2a00a95a25","sha1":"8325b7c6af71779fd27c8597c99d9618a0808944","sha256":"c89a031f753fe40af265f015419035d497b9611193fb0090c8fceb0925d1bace","sha512":"ddae5384e8b0c7ed4f3be1842f8cc61956733c3317b04388b476036a9e51aeaef5e753b98fb1f9447f7e265906c4bb289b87486eafb5d04cf34f9cdacbc371d0","ssdeep":"12288:Il6fsLisL19XM9pN1yqywKzOw4OMbXRjE6dOZTp6tXyI6QVKjAxM7SgAEDge6Df9:KYQxOKtFYqzG","tlshash":"fb55c54aa6a020398273e3398e2bc909f537572f5755845b7e7c81a91f3242493f7fe8","size":1401158,"data":"","first_seen":"2025-10-09T00:17:19.774922Z","last_seen":"2025-10-09T00:17:19.774922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52187a5a490c13b703bf7cb3dc287585","sha1":"4b0e51ea0236a2b1b75ec890b502ea7b0f6a1ce0","sha256":"3ce6f7db92960b22836a7a60fc940cab8c20d39a7f887cf4d23f2d8fd6ad7009","sha512":"27112c99753fb9e8b6fc15e345f637bc4a3b4d21ea9893979527e62c0d85f988201a8f62a5c5c6ba60cca517a58df2a9240a792a550b2d11836c29cabe9fdb38","ssdeep":"","tlshash":"21a0220820b32028b020303c303ffb00f0c22822230cc23a0caae20c3c008b0033cccc","size":77,"data":"","first_seen":"2025-10-09T00:17:19.778112Z","last_seen":"2025-10-09T00:17:19.778112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.ibb.co/Nn3Jmzk8/Moonova.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.moonova.org/","date":"2025-10-09T00:16:51.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /Nn3Jmzk8/Moonova.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.moonova.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Oct 2025 00:16:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 556420\r\nlast-modified: Sat, 02 Aug 2025 17:05:37 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":556420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"de7f4d8a2794fd24e5bbd6fc0c2578ff","sha1":"627ed8150232965c575900a0fd281b924059feab","sha256":"4e505de4d71ed990a068aea88757ab23e29a9cb33904d368a619a38f17218836","sha512":"26ef3b4eb5383059d5fe7a2856ff429adb2164dac0d161dbc561c84e1c16dd2728430fa8ecfcd231d016293c0808bc2eaec6525e4eb688bd82c9d870cb2cad10","ssdeep":"12288:cYqcbclo2mvLI9L3gnLqI70e24QH3LQ80BRZKRlLiIoSElfJ+980/wA2Lx7:c3cB2mjwgnWXesL3E8LOvG8+uLx7","tlshash":"13c423e6170c2e9eff2164129d549d92fdc136c9eb6dbeb8e56d5391b30802db0203e5","first_seen":"2025-10-09T00:17:19.754162Z","last_seen":"2025-10-09T00:17:19.754162Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":56,"dns":1,"connect":21,"send":0,"wait":23,"receive":135,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/WW1P5S1R/Moonova.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.moonova.org/","date":"2025-10-09T00:16:51.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /WW1P5S1R/Moonova.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.moonova.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Oct 2025 00:16:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 808784\r\nlast-modified: Sun, 03 Aug 2025 17:13:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 852 x 852, 8-bit/color RGBA, non-interlaced","md5":"9c80291fd8d5c1b6a46adeab78a4a0e7","sha1":"638ed4e86199d6b5bb67bf5365fb81736826919c","sha256":"881e46f7b043f5a5f9f3fb2b5933d260c42acb3aaf022e47b5fc096348041711","sha512":"235eba8eb707c8d5bb2cccda7880ec2bbdfa57c9e0c01ab94be7860f6c85cb379022ee3635d6b8cb020c0657ba0bbff483b8d8351d37a76e2572422aabcc7d81","ssdeep":"12288:fyXpE7L6D4wvad9gRbA4xlCNOERcLAniepzEFQvBFVyY4CgRQTTzK3RXKLkCybDT:aXpEftwvxu4xlCccBPSogUm3RXKMbJZ","tlshash":"290523dfedc60c1aa91eb07810228ff0e3a63b556d7927756717f9e520bcd93008ab58","first_seen":"2025-10-09T00:17:19.758761Z","last_seen":"2025-10-09T00:17:19.758761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.moonova.org/","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T00:16:50.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.moonova.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 17:30:43 GMT","end":"Mon, 29 Dec 2025 17:30:42 GMT"},"fingerprint":{"sha1":"04:F4:A4:4F:F7:A0:24:52:F2:E6:0A:B4:D9:1B:43:9C:5A:63:AA:78","sha256":"4E:F1:0B:5A:D0:F4:57:9A:9F:BD:CD:2B:3D:1B:38:5F:2D:51:22:05:D9:14:BB:AD:A4:AC:A2:36:86:84:40:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.moonova.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 09 Oct 2025 00:16:51 GMT\r\netag: \"1787681d9a75f57a8b6c8fd8c6941c51\"\r\nlast-modified: Thu, 09 Oct 2025 00:13:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2j2zq-1759969011025-4641471d4b93\r\ncontent-length: 860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1787681d9a75f57a8b6c8fd8c6941c51","sha1":"3c5d73823ea213a8629937622ae51673f7494b05","sha256":"eb2d51c0cad7a2b636cacd5052de5f24dd94cefa22b6c2dbb05cae21bcd9f262","sha512":"8d37a444448ba7b6f66fda303fb8868692b5b0ddbb30a21bb49438fd48ab9ed3605281f2eeb886ab8f59eee0752bfab0f5d4a2e49e44a95b3fbcdacf3d174b28","ssdeep":"","tlshash":"4641eb629aa0cc194379c219bae2f05cca539103c6609d4db9ec508f2be3be5c8c735a","first_seen":"2025-10-09T00:17:19.762075Z","last_seen":"2025-10-09T00:17:19.762075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":94,"dns":69,"connect":1,"send":0,"wait":11,"receive":29,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.moonova.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.moonova.org/assets/index-lB_va8A2.js","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.moonova.org/","date":"2025-10-09T00:16:51.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.moonova.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 17:30:43 GMT","end":"Mon, 29 Dec 2025 17:30:42 GMT"},"fingerprint":{"sha1":"04:F4:A4:4F:F7:A0:24:52:F2:E6:0A:B4:D9:1B:43:9C:5A:63:AA:78","sha256":"4E:F1:0B:5A:D0:F4:57:9A:9F:BD:CD:2B:3D:1B:38:5F:2D:51:22:05:D9:14:BB:AD:A4:AC:A2:36:86:84:40:D6"}}},"request":{"raw":"GET /assets/index-lB_va8A2.js HTTP/1.1\r\nHost: www.moonova.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.moonova.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-lB_va8A2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 09 Oct 2025 00:16:51 GMT\r\netag: \"a734257fecd2861ecac50b9e2b794dc4\"\r\nlast-modified: Thu, 09 Oct 2025 00:13:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hgkfx-1759969011191-f83cf56f2096\r\ncontent-length: 301156\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1401158,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1114), with CRLF line terminators","md5":"4d9bf2a794a987500436a2aca218a879","sha1":"38de250e2337858e7d631fd3e264b5c4bd3139e2","sha256":"cf1c03b70878cb9eb3255a6f27a4486e1eef45d39f06facf3ec262d5f846a121","sha512":"d422b5195022a786b5103565228bf96e56f08fd30f45b7341d2303f1576664745e1909641c00c427ff7791186018c75da2b4c595dac56d96c62cdefaf4dad134","ssdeep":"12288:Il6fsLisL19XM9pN1yqywKzOw4OMbXRjE6dOZTp6tXyI6QVKjAxM7SgAEDge6Df3:KYQxOK4","tlshash":"a425c74a6a9024398273e3398e5bc809f936172b1355855b7a7c81ad1f72434e3f7fe8","first_seen":"2025-10-09T00:17:19.765337Z","last_seen":"2025-10-09T00:17:19.765337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.moonova.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.moonova.org/assets/index-CvzcsSgB.css","fqdn":"www.moonova.org","domain":"moonova.org","tld":"org"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.moonova.org/","date":"2025-10-09T00:16:51.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.moonova.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 17:30:43 GMT","end":"Mon, 29 Dec 2025 17:30:42 GMT"},"fingerprint":{"sha1":"04:F4:A4:4F:F7:A0:24:52:F2:E6:0A:B4:D9:1B:43:9C:5A:63:AA:78","sha256":"4E:F1:0B:5A:D0:F4:57:9A:9F:BD:CD:2B:3D:1B:38:5F:2D:51:22:05:D9:14:BB:AD:A4:AC:A2:36:86:84:40:D6"}}},"request":{"raw":"GET /assets/index-CvzcsSgB.css HTTP/1.1\r\nHost: www.moonova.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.moonova.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-CvzcsSgB.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 09 Oct 2025 00:16:51 GMT\r\netag: \"cc138ff4c057ec3a2aba9fb5b376dfb8\"\r\nlast-modified: Thu, 09 Oct 2025 00:13:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6vvqc-1759969011192-d9f241043090\r\ncontent-length: 15524\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96868,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"7425a17628b462550d145b8558498ebd","sha1":"54aa3680cea8eb3a8b269c83f3e7f088af61d307","sha256":"587f84c0f18ddcb79372333be759598fac4113250fd24c473bc29b5cec9f0ab5","sha512":"85ed88df7149271d1e50dcf43220bdb79115fb87ff4659b9627f1ec3e156c3e0f3cef81de40a77eff1cdc49c663a3e6f7afb4b56adf374e4757bd33d0b411b75","ssdeep":"1536:iwjLMuaMzj9+ILwf9gvyx378VQZkt5FyCWoJ:VLMu9jvyx378VQZkt5FqoJ","tlshash":"20938314a507a07f2e37abf893d8615dfa1a70e68d3a16697ecd40111ff26f468a3c1c","first_seen":"2025-10-09T00:17:19.768509Z","last_seen":"2025-10-09T00:17:19.768509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.moonova.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}