{"report_id":"fd4da003-731d-4e56-b526-f4df5d44a726","version":6,"status":"done","tags":[],"date":"2026-04-02T17:28:51Z","url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"172.67.131.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"title":"Moonwell - Lending made simple","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"172.67.131.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T17:28:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dashboard-moonwell.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-04-02T17:28:56.588228Z","last_seen":"2026-04-02T17:28:56.588228Z","alert_count":7,"request_count":7,"received_data":7388017,"sent_data":3863,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-07T19:52:02.536142Z","times_seen":2988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-07T19:52:02.534591Z","times_seen":3070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4ce97f4affe0513c5f19d7ec2a22a27c","sha1":"14e671fe66fa2330f34a7c3a9f97bc3111ea8b84","sha256":"daeccc9b70f0dd62e3aab826af0045a1ede5d9e3215000754e528dec53a6e258","sha512":"911241574eddd18ca1e5793552fb8d3d04a1d725be9d97c83d4fd74acff50eb4a67d541dabe29ea2b0c1d8473f888a5348890901d6db75e703d7f9c25d28aac5","ssdeep":"49152:N7OwPEZJsbBZBurwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtAZa:5","tlshash":"f8f523422c96e8e68f88526170f76e0b69940d035c5df0dbe7a4f9c1346dfa281dbd2e","size":3416843,"data":"","first_seen":"2026-04-02T17:29:01.221957Z","last_seen":"2026-04-02T17:29:01.221957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/tracker.js","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46440b0bd3c0a48d1e6dd7a35084123e","sha1":"6386775d3ed93629ecc850a2e5810e1b8682a02b","sha256":"c5d5b2974b80e0932dfc133aed634b0491d00aa581ab769bd607eb4ac31cfea9","sha512":"fae63b0ca3bbc6aa247ee5626f975eaac97b36ef80591ff2046a7feed6555b9acc0cb975a7ac62000db3b3645f7a55ebbd54ab3d41bba5b4654a501fc010e787","ssdeep":"192:U92I4ZzZj8iomtfcKZ+QysCcuOK3MozI9x1aJ6uCKbaD:UsPZPywuO3ozI7qt0","tlshash":"96f11e5b23f23271453b62ad4b9f76a6b23410032009d9b47edd47143f85b268bb5aef","size":7517,"data":"","first_seen":"2026-02-23T12:44:16.252459Z","last_seen":"2026-04-16T17:01:51.151456Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f3f76784fe14f8eff2ef6d2865a2ae0","sha1":"b2ce48edb4445688437061ab0fcb88932f6a8824","sha256":"e4aca3256d7210550cd9b69aa94c6fcf4ec55c19e8bd84163d9ba161cb383ce9","sha512":"3caab4623e08586c83e22f3ca9baa0e39232fd8229cc6419818bf8d9c5a777592240bcce91ea5fbd5cba837c40edd2bdd9f1a15153b8312532ba0f2d0366459a","ssdeep":"49152:E7OwPEZJsbBZBuNwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtWRh:H","tlshash":"b4f523422c52a9f68f88536170e76e0b65940e035c5de0dfe7a4f9c1346dfa281ebd2e","size":3414419,"data":"","first_seen":"2026-04-02T17:29:01.225526Z","last_seen":"2026-04-02T17:29:01.225526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31086f1da965adf99cd3eb9293f20e84","sha1":"05283434a0d1054d0cb8549e69c61759748211d2","sha256":"5aa80449bcebfa67fc46c46237e88c7a5af968233c0e4fe598574cce865ddc20","sha512":"dc5a40a1e119b085c339744e23b6c8235afd09c73af686d87381d7f279dd1b44e24825ef24598064c69d65958bb60cd34b1e462ad3827f7d88d28049ee8be511","ssdeep":"","tlshash":"be213a2652b622a63d4bb0fd5efad84d763a9007d8095450789e918c6f70b3505f77cc","size":1235,"data":"","first_seen":"2023-03-11T09:56:06Z","last_seen":"2026-06-05T04:23:25.767325Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b870591f7cfbed05279169a3f0b7aca","sha1":"f7583e6ec1628f9aeee2424a2698acbf38a87f41","sha256":"6989035cb2c4cab27643b8eda4eaa613871bf57d73aac20c10474619cbc743ce","sha512":"da2ea53135595686274526c5e73b17fdd0d48ade02d24a2839602160a7d6f16a7490ecbee0e801f363cd10e398314ad4ef85b49d555adca2c70afb7f25c82c1e","ssdeep":"3072:zo8WUt7YRpUbyCmRX2OzYeDHWAi+Yspnqibm+y079vs0Ct:zoM7CmnkpnqSn79vs0Ct","tlshash":"b0b42e95eb97809c8e99018ed0a2fd45d8184d278e9cb4d3ef1eddc23559f72808727e","size":527142,"data":"","first_seen":"2026-04-02T17:29:01.228566Z","last_seen":"2026-04-02T17:29:01.228566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-06-08T13:16:56.58729Z","times_seen":2901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-08T13:16:56.579886Z","times_seen":3107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?chain=evm","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a333e1d032e3de24e9a7f2bdf424e28","sha1":"d767f7d61616f0987a1935f0ec396a795d616dcb","sha256":"51bcf23ad5d7a2302455f69c4251f28a4e794258e5fd9bf2f27cc49531a5e2e1","sha512":"027575d77d826d470113979a92ee481e3534dc577add42d60ba7576b8ade5e6ba11dab3693f0ed60569cd66745f483335f4751b7e5123a26222be076947c66c5","ssdeep":"3072:muk0GhSnU4jvPXzkt76SaRHe+b4uTnG8bG2jvzPTfRcW1fZ:muGhBHC+/gpNXP1cKfZ","tlshash":"35051ed5aad75169be4a428ecca2ac44d4184d13bd9cf493faedfd807029f61c08b35e","size":811997,"data":"","first_seen":"2026-04-02T17:29:01.205881Z","last_seen":"2026-04-02T17:29:01.205881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-06-08T13:16:56.583434Z","times_seen":2932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8568919e127b3d12d97e49180d9304c","sha1":"e9ac3175b3ea59b3f2e9503995b4c1ead314ed30","sha256":"d98f85d250790317b7e3e5970176506b1e217e6546b02b005e69163279a00fd7","sha512":"97c31f2bf35351bdd65d63e0d5272ff4f0218c66eced872591dda20a868695403c63e1548919e4cc3604fc6c657741e8dfbc0f514408069e5c7374ad7a6dae54","ssdeep":"384:iaqpdv5IyduF01vvkGx9lJEgTEQg1LkB2hGwmAtiT6Fv8D0K767YKoPbs:iPLv5Iy4FuvcGxbJXXuIBKGwmAE2ONo","tlshash":"ff03b8aa1d5294d40f492befc0f7a84a96148e73cd9db50ac52fccc13229fa685c717b","size":40627,"data":"","first_seen":"2026-04-02T17:29:01.233446Z","last_seen":"2026-04-02T17:29:01.233446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-08T13:16:56.580916Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/tracker.js","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /tracker.js HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nlast-modified: Mon, 19 Jan 2026 02:48:23 GMT\r\netag: W/\"1d5d-19bd427499e\"\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30Uc%2BWlik%2FkVPmTxkFwCRtcJ7DXZnJ6YflY5hqEaXfGmEKQFnzs4Fd2H7j2jRNkRSUESuScM4fBb8NT5YTQ1n809Jkso7gBQY243Q7x3YGa8wZkjzzC7ISeu5eemafmr0WfSY1htx9sQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc44f8232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7517,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"46440b0bd3c0a48d1e6dd7a35084123e","sha1":"6386775d3ed93629ecc850a2e5810e1b8682a02b","sha256":"c5d5b2974b80e0932dfc133aed634b0491d00aa581ab769bd607eb4ac31cfea9","sha512":"fae63b0ca3bbc6aa247ee5626f975eaac97b36ef80591ff2046a7feed6555b9acc0cb975a7ac62000db3b3645f7a55ebbd54ab3d41bba5b4654a501fc010e787","ssdeep":"192:U92I4ZzZj8iomtfcKZ+QysCcuOK3MozI9x1aJ6uCKbaD:UsPZPywuO3ozI7qt0","tlshash":"96f11e5b23f23271453b62ad4b9f76a6b23410032009d9b47edd47143f85b268bb5aef","first_seen":"2026-02-23T12:44:16.252459Z","last_seen":"2026-04-16T17:01:51.151456Z","times_seen":75,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?chain=evm","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?chain=evm HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3eOLwnh5y9EVmu%2FvqrI7xRH6MKUTNTsmobF0BeMf1BkVCbXp3e7zHuUH1kGZFTlPJX7wyKSK3yFaBApf5o4dJrNFT5LroCA9ipkokSJFvGdZoL1RhzeK%2FwWUhfU%2B7zvnoXyhXhyFwXK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc44f7b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811997,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6a333e1d032e3de24e9a7f2bdf424e28","sha1":"d767f7d61616f0987a1935f0ec396a795d616dcb","sha256":"51bcf23ad5d7a2302455f69c4251f28a4e794258e5fd9bf2f27cc49531a5e2e1","sha512":"027575d77d826d470113979a92ee481e3534dc577add42d60ba7576b8ade5e6ba11dab3693f0ed60569cd66745f483335f4751b7e5123a26222be076947c66c5","ssdeep":"3072:muk0GhSnU4jvPXzkt76SaRHe+b4uTnG8bG2jvzPTfRcW1fZ:muGhBHC+/gpNXP1cKfZ","tlshash":"35051ed5aad75169be4a428ecca2ac44d4184d13bd9cf493faedfd807029f61c08b35e","first_seen":"2026-04-02T17:29:01.205881Z","last_seen":"2026-04-02T17:29:01.205881Z","times_seen":1,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?chain=evm","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?chain=evm HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMZquhlBk3FcY4mhNCMIvsi1TiCJS2W3APOWdhKnaX2H2jFKwkbyDucw7%2FJnLoWG9374oN2XLiRBknXaC2HP8YaoY65%2F%2F5JAImnNExSL3c12xKN8KHms32HDD%2FYUnzeWtVGEVE11QJgM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc45fc532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811997,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6a333e1d032e3de24e9a7f2bdf424e28","sha1":"d767f7d61616f0987a1935f0ec396a795d616dcb","sha256":"51bcf23ad5d7a2302455f69c4251f28a4e794258e5fd9bf2f27cc49531a5e2e1","sha512":"027575d77d826d470113979a92ee481e3534dc577add42d60ba7576b8ade5e6ba11dab3693f0ed60569cd66745f483335f4751b7e5123a26222be076947c66c5","ssdeep":"3072:muk0GhSnU4jvPXzkt76SaRHe+b4uTnG8bG2jvzPTfRcW1fZ:muGhBHC+/gpNXP1cKfZ","tlshash":"35051ed5aad75169be4a428ecca2ac44d4184d13bd9cf493faedfd807029f61c08b35e","first_seen":"2026-04-02T17:29:01.205881Z","last_seen":"2026-04-02T17:29:01.205881Z","times_seen":1,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTcPLg109IgO8PnUbYsoDDk8cW2jprtSSLWr4a64TKGWXPxS202oCR%2BZ1YqOKEfZnrN9mzsrYC7oWQuKTBJLIRLaHrQv%2FLtVonaubOQD5%2BO8vA9kjT3HoxSjmvr2EWued8k%2FhzculT0M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc45fc732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777706,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5765)","md5":"1e66b1dade596f2f3f0a3eb72f1ab238","sha1":"fb86a4c1c1704fc98c417afd8a39ef6d13579336","sha256":"52dcb512c33afb9d4f8d79aa332b596812263b98d42b190b2fcf86e59a61401f","sha512":"08acf273604f160a4abc1edeb7e546e57fd5cb3e0e8be8ffe05c8a203fb473750a8325d60fac87db2bc8845e16bb41ff4f96c9f581cc8cbfb54a9f22972bcba7","ssdeep":"12288:jZfTgW3FAiQdUUk60Rae2blkT0BYit7sIAvJxV8kAZkZ4bfF:dfbKijFjUdOT0BYiryxVjbuh","tlshash":"3bf46c7e59e200151e2355b593df2a28ae39e0938d1aecf8becd1506cf89bb45fc2705","first_seen":"2026-04-02T17:29:01.208649Z","last_seen":"2026-04-02T17:29:01.208649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrMESYqVwLtnbjij2eGvcXKeTiiZ90mUEe1oGIFnVwf4W7IrL5dSSQfEiPAS0n3m83NAHc904HqlOKsq9J2CJzzb3qF%2F9DTXx7xYXrZUC%2BhLkXrUQqC%2B1vsJDZSUhPKo7875QbGgGSLn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc85a8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777706,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5765)","md5":"3f21793fb7cc38f951f1037967162ad7","sha1":"b3375b85fec8caa7fed67066c43304a45ec6d844","sha256":"78e94b0c2f02a7a1062d5eb500fecdbafba3922e8a19783a29164037b1ab147b","sha512":"03bdb0e14e4633a14db8d1953c8c9992c8cd1e6281ce2907b17bea026e7faa54552679d17fefa86614c41e5272a8880e069759c877333d0ce92388d7581bf48c","ssdeep":"12288:NZfTgW3FAiQdUUk60Rae2blkT0BYit7sIAvJxV8kAZkZ4bfF:XfbKijFjUdOT0BYiryxVjbuh","tlshash":"e6f46c7e59e200151e2355b593df2a28ae39e0938d1aecf8becd1506cf89bb45fc2705","first_seen":"2026-04-02T17:29:01.211614Z","last_seen":"2026-04-02T17:29:01.211614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?m=2958584","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dashboard-moonwell.xyz/snapshot/claims","date":"2026-04-02T17:28:25.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /assets/785e2d65-6027-4f58-9ea3-d91e2a88ed98?m=2958584 HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dashboard-moonwell.xyz/snapshot/claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWWjKUe3t%2BeGrgsU0zpfSLVNVhNhZ2IC%2FtOwPLDw%2F2f9XAjFN3JaI0axENdRS1uFHvAxoVVzAWFGKZfY9%2FTsze7CIzSSVmS2xDmU4l7Oy5r%2B6eC9hNFb4%2BH3%2BPrwuH0EWLs7uxA4ZFL6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e618cc89b5c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3416843,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"143380f3dac573e39c0e746904ab2285","sha1":"78c2c76b29028dfcfff93d90a787da459d3250a9","sha256":"e308795501c144d76ca5acc7ceb7f82cbb38af770a4cf5bc45080739ddbde57c","sha512":"3a7b3f8aa6cda2a4709ba16f47a22fc8c1eaaa794607e8faa99a703a1e96ece567e3a74b37903b8d8f5db5a88ea79aa3e2df90dff44c5f9cf042291f762397cc","ssdeep":"24576:GOx3V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd6GBj9L:N7OwPEZJsbBR","tlshash":"a42523512e97e8958f8c7aaab4f7ad4765004f038d8d60cbea55edc0312c7f581caa1f","first_seen":"2026-04-02T17:29:01.215008Z","last_seen":"2026-04-02T17:29:01.215008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dashboard-moonwell.xyz/snapshot/claims","fqdn":"dashboard-moonwell.xyz","domain":"dashboard-moonwell.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T17:28:23.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard-moonwell.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 01:30:37 GMT","end":"Tue, 23 Jun 2026 01:30:36 GMT"},"fingerprint":{"sha1":"7F:67:81:25:CE:94:25:04:C9:8B:7C:39:21:9A:8E:EA:D1:D3:5C:72","sha256":"44:95:DA:29:F3:4D:65:BB:62:3F:7E:BE:38:37:D5:B0:89:7D:9A:CD:7A:2C:2E:2D:11:A6:7F:6B:12:C2:A6:33"}}},"request":{"raw":"GET /snapshot/claims HTTP/1.1\r\nHost: dashboard-moonwell.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 17:28:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\nset-cookie: visit_session=1f98576fa07a33fae9dbc72bcdde98cf40f280320e614a024a54c0fca4ca041a; Max-Age=86400; Path=/; Expires=Fri, 03 Apr 2026 17:28:24 GMT; HttpOnly; Secure; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMD2FFPyR%2Feh8uxuG0io3chDAGV1NsOkQKg6UWi3J01QV5sqvXQ%2FrSbssRWtPjrsCGKioL2tPaDZxTpIJ%2FnHj2kLJcwtCho4g%2FRbTpCKzZT3cDY5wiCs%2Fa3xlNyJIbnWdTE8VJjq9ROA\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e618cbe4ab6a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777706,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5765)","md5":"25e9c134c44fedb39255719318441557","sha1":"92712d3ef0f03cc020a59aa39b8b89ce062cff8c","sha256":"7f9cf06d8e9dc3601445d5c8215ddc1899fea4376fc4a7dbaf6920f5fa4743e2","sha512":"fd0f9660f2c121f000edf487512621e8d43fcd42e1cebc8886022b9bd8c4ab31a6afc382e0efd9e3bfb8bffcf490c9d5b2e7bac6dc64eff5d3f1cfbc7559b181","ssdeep":"12288:jZfTgW3FAiQdUUk60Rae2blkT0BYit7sIAvJxV8kAZkZ4bfF:dfbKijFjUdOT0BYiryxVjbuh","tlshash":"82f46c7e59e200151e2355b593df2a28ae39e0938d1aecf8becd1506cf89bb45fc2705","first_seen":"2026-04-02T17:29:01.217596Z","last_seen":"2026-04-02T17:29:01.217596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":88,"dns":74,"connect":1,"send":0,"wait":819,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"dashboard-moonwell.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}