{"report_id":"ff11e12b-70c2-44fb-af00-0c029e62e21a","version":6,"status":"done","tags":[],"date":"2026-03-30T12:14:40Z","url":{"schema":"http","addr":"self-service.moontoncs.com","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"title":"Mobile Legends: Bang Bang - Cancel Change Email","dom":{"size":147024,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57109)","md5":"87be5b154e85849417fd083b9d70f9d1","sha1":"cc10cff4aaeacdaea8dd595e89b5ac431c085aa2","sha256":"417eb512abc63819090c8745b1e4a81ec17c3314bd1f39f63367968a6e4099c3","sha512":"787087c6f2f209b2f15b3ae1b0c8eed0907862a3b5fb2e75a48d85205c8b290310fbfa0f251e57938832f8b5a4a2d3db3f23d42b76dba8b7ffb9928ab4f5fe57","ssdeep":"384:nCbXYkWSNnhvD3wAhoW1QezbqLufyNeLY+6DRTTN9lKkdcrUfpWulaIi9XFRmHmt:aW6nTyNeLY+6DRlqyWulab","tlshash":"00e30e22cf413c4b762b08177a21920d51f72837a9d1dd3eb7ae9a67cb259dd6133823","dom_hash":"domhashd89fbe400d07dd94385c25f2acb93b0a","first_seen":"2026-03-30T12:14:47.321279Z","last_seen":"2026-03-30T12:14:47.321279Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"self-service.moontoncs.com","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T12:14:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-30T12:14:23Z","timestamp":1774872863,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":48215,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-03-30T12:14:23.636727+0000\",\"flow_id\":1518642070009655,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":48215,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-30T12:14:23.636727+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"self-service.moontoncs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-29T23:24:32.360777Z","alert_count":0,"request_count":1,"received_data":88519,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"register-sc-moonton.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-05-22","domain_rank":0,"first_seen":"2026-03-30T12:14:41.525107Z","last_seen":"2026-03-30T12:14:41.525107Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"akmweb.youngjoygame.com","ip":{"addr":"95.101.11.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-02-25","domain_rank":759760,"first_seen":"2021-06-16T14:12:30Z","last_seen":"2026-03-30T12:13:37.329294Z","alert_count":0,"request_count":3,"received_data":27312,"sent_data":1448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cstaticdun.126.net","ip":{"addr":"47.246.50.194","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"domain_registered":"1998-02-28","domain_rank":474446,"first_seen":"2017-06-21T07:31:41Z","last_seen":"2026-03-27T04:49:16.383385Z","alert_count":1,"request_count":3,"received_data":767856,"sent_data":1358,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"self-service.moontoncs.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":3,"received_data":150658,"sent_data":1521,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"play.mobilelegends.com","ip":{"addr":"23.36.76.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2015-06-07","domain_rank":102993,"first_seen":"2020-04-17T03:52:48Z","last_seen":"2025-07-13T09:28:26.783229Z","alert_count":0,"request_count":1,"received_data":11181,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.dun.163.com","ip":{"addr":"47.245.156.151","port":443,"asn":134963,"as":"Alibaba Cloud Singapore Private Limited","country":"Germany","country_code":"DE"},"domain_registered":"1997-09-15","domain_rank":567732,"first_seen":"2018-06-27T10:02:17Z","last_seen":"2026-03-27T21:09:07.38521Z","alert_count":0,"request_count":1,"received_data":1171,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.195","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e37138d619d162c07ec319f394979e5","sha1":"d0eeddeecb8b2ba5a2d293b495ef81f6b3df8103","sha256":"de1b1412257aec714dfc50b49e249f925197647dddef3d178ba791612ffc38a2","sha512":"34a91174fe301d3ba732b7f2d9ea39045343be849befcd3d50f20e17fd9302c9b1d85e59accae3f02d9881cda5768e04c9a2045d3296c8b1ee1bbc411c9819b4","ssdeep":"12288:xWHScRo5KuiykhWGajMXiPafixLRdGUN0ZinzYybkZhd1Bp8XXCFK2STS81cts6Z:A0RdGUNQin0ybkZhd1B6XXCFK2STS81S","tlshash":"ffd4b360afc0641d22d74b37722b66dce8570977b940c4679114ff6caaa3729fea8c31","size":631406,"data":"","first_seen":"2025-08-11T01:40:48.887978Z","last_seen":"2026-07-14T01:14:01.19385Z","times_seen":3860,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"play.mobilelegends.com/base/report/report.js","fqdn":"play.mobilelegends.com","domain":"mobilelegends.com","tld":"com"},"ip":{"addr":"23.36.76.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7ad59223a072e29d8880cd2c5fe5600","sha1":"cec3c2a8bb879da66a9f32610f0cbe5a151ff9d7","sha256":"20ecb395779c1b242b78e0ec46ebc82a32b48e781568a7df9cb8f7c4cd0bb5a3","sha512":"c81cf6ace9931026855ee15186cea467c47d00ddeec11903d4744a71665d0893fc0c0604221a027d97de47fd2c723a6e3cfee4f04fabb109b27915a740c8b7aa","ssdeep":"192:mMcIzyXXVDBVK+bdIVNaLcraZVdDOnR80UpCaPcbaiDv:sSyXltk+JANNrcVdKnRjaPAPT","tlshash":"eb22d66cb2c1f82a03a631e5244b4501633b990a69d6c18cf726ccd5aa7dd5fa037fbd","size":10310,"data":"","first_seen":"2023-03-13T22:08:37Z","last_seen":"2026-03-30T14:43:25.606775Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T00:39:03.844421Z","times_seen":184966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/load.min.js?v=1747935166229","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.194","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb8efb99a8950ca6b13f38274938882c","sha1":"8ab6335d260069ded73009a539c3bc91404791de","sha256":"2f55203b6eac5a5edbefc7225557ba6bf8f4d869c67525d11d10719a8becd3d5","sha512":"0d60f0db0dc4f5ef4ea8baf1d18d44d20313d436f84d3033453828fbbe856b673a442085290ebaa5627ded58cee3d35a8a5560bd860cf7697330c769bb99275a","ssdeep":"768:9KHK1+h00zI0RAcKvErsQsLiz0I+/QtzfS5+8hfgVCMiE:9ChrsQa6tjS5D5gEE","tlshash":"2ef2d68cb690f4bb4ba76070813f920be13b5614b499c0e4b155e5e4adbd8ce5627f3c","size":36116,"data":"","first_seen":"2026-03-25T12:02:18.210304Z","last_seen":"2026-04-08T10:38:07.655442Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84031445bd5cd87d735fcf707d69b58b","sha1":"5090ca74d8b94456d6b9d0906f52406c9e91be13","sha256":"76c9c5a8a66b23205826d1780e1ffeae47677291ad1332388e8cdbf529f561df","sha512":"2503b0e4ad47c9ed253d930a519367a49ffd1c5f4adf738aeb6e25602b8a7a69a221b7df8bdec2e0eb33223f7cb4d0f9ce53ccac892e78d0a923d4b7512a058f","ssdeep":"96:YyBwxH5F/YaiDUfH5F/YaiDEYkQmydnS1R4RX/Yeuv7:Y6wd/YT4b/YTIYkQxS1R4RX/Ye87","tlshash":"93d14219f5e325411e7bb0b686ef91097661410b850cee047c5d46e46f89facf8b2ec7","size":6545,"data":"","first_seen":"2025-12-07T05:09:55.438726Z","last_seen":"2026-03-30T14:43:25.613865Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31b2ab8fdb80dd353928f7b9b426687f","sha1":"327585630094ea5451b2299610bf9e83973f3003","sha256":"54de04862becbd51c1481b178d213f3715822ffdfd662fbdfbb7188b0226af59","sha512":"0747ee88bcaa69ad893bc526d7bb3e4363a48cd159d8263aaf9fccca91875612c8a671734cce595dea331eafe6063702a1a9ae67e1e2342f45674de4387bae15","ssdeep":"","tlshash":"12f0544fdc5c9041acbb1441d5a6c56d3d320aa7004fd242fa0ec0245f13b88c50ebfc","size":583,"data":"","first_seen":"2025-12-07T05:09:55.439672Z","last_seen":"2026-03-30T14:43:25.614592Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"08a861daf9deb387c38caf259567fdfb","sha1":"216e39b0f41c31c80b418ef16fd0be224fddb30e","sha256":"8e1be7e63cfee027b4b49c3dbbe992d600e6c5917d1be588b4abd0aa3befb32a","sha512":"ac2aca45e1a4d065b57cd54c82791b05e08024040f0f9a5d17cd477d13ff6c5f096b5bfda765d7a3804176b5ad8bff550955eaa11cb4ae731651d2135bbaf10d","ssdeep":"48:+lOcOwJ7Dw72wuytA7gmwbXaretwT61ECMV3EVBg+gRJ0RxpK37rIXxEZy94YKJm:8pZE7xuQA70WawXCTkX0Hit9XFjyn","tlshash":"2fb10eda8d2319c286ef563a272f640010675473480ad85a7f5cd754ef88f8f23a7be8","size":5405,"data":"","first_seen":"2025-12-07T05:09:55.448646Z","last_seen":"2026-03-30T14:43:25.61509Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.dun.163.com/api/v2/getconf?referer=https%3A%2F%2Fself-service.moontoncs.com%2Ftools%2Fcancelaccount%2Flogin\u0026zoneId=\u0026id=fef5c67c39074e9d845f4bf579cc07af\u0026ipv6=false\u0026runEnv=10\u0026iv=5\u0026loadVersion=2.5.4\u0026lang=en-US\u0026callback=__JSONP_b5q36ir_0","fqdn":"c.dun.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"47.245.156.151","port":443,"asn":134963,"as":"Alibaba Cloud Singapore Private Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcda9250775897ed17d1513fe77da1bc","sha1":"0ad1b532730f6819f95cbb4ff9a76038f3b38d25","sha256":"b0ef5d1883f75f51fbb963014975cfb83c5722267a6002d558555de5c7c88e84","sha512":"09cfffc48c2f700c7f9166addf3a761d69dfc453402509aa942480f8cad073b7cfed87af0f7447f556a48d6344a09581053dadecd92cf03c2675b2baf4e8f48d","ssdeep":"","tlshash":"fe01f10c006c84be4c9598c5ad5a1c056b39b461bf29fb4ecb560847c35e3bc634349b","size":812,"data":"","first_seen":"2026-03-30T12:14:47.328862Z","last_seen":"2026-03-30T12:14:47.328862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/ir.2.0.13.min.js?v=29581214","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.194","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"efd73a3f4db0aa3c50ec127eb8866d46","sha1":"e30009ab604c53c1dd9245876e44dda93dda956d","sha256":"c96a0feb5eb853d0fb85142fc727ab449025863c52ad59afce22f67dde9fa9ef","sha512":"dbe642e757cfbc97c2a5797758a80f8985f3f345f684b4e81613c0c51f0122909831673cac082dffccf06c56c7431e06b0483a07b16567be3d4e337f17c2248b","ssdeep":"1536:w5+fWmazAIoFzOIv23e1rE0gt33ZIFF8bvvxAKcfu9wntIhhTGK:nzFzONeu1ZwBu2nehMK","tlshash":"ae93f6d875c2b52642639676013f140fb12e1da0295ca058da32f6ef7d3931ed1affa8","size":97348,"data":"","first_seen":"2026-01-26T11:18:23.941077Z","last_seen":"2026-07-17T00:00:00.570059Z","times_seen":1439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-08-11T00:48:23.249971Z","times_seen":45820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b4739958501b7d2138dc62bc20fc8e4e","sha1":"a5f0ad06eabbbf52effdbcd1926a800d8e721bbc","sha256":"5c8353e7dd41ea5fdd5b4eb1ca641af3ef7c4c273bce90a70159ab52221e9ad2","sha512":"a0d12a06b201d4f1aeddd568fa756ac0fb08b8cddbcd97a73907ccee251121a92707160193774c23ddc950c15355e6ef9bcde45010f5600ef7d208ab68777b3d","ssdeep":"","tlshash":"c68000ceb082b00082022028003b8c0ba32b08c88a08c0028200008238a0088a02ba88","size":28,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-08-07T00:31:10.736014Z","times_seen":9274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b4739958501b7d2138dc62bc20fc8e4e","sha1":"a5f0ad06eabbbf52effdbcd1926a800d8e721bbc","sha256":"5c8353e7dd41ea5fdd5b4eb1ca641af3ef7c4c273bce90a70159ab52221e9ad2","sha512":"a0d12a06b201d4f1aeddd568fa756ac0fb08b8cddbcd97a73907ccee251121a92707160193774c23ddc950c15355e6ef9bcde45010f5600ef7d208ab68777b3d","ssdeep":"","tlshash":"c68000ceb082b00082022028003b8c0ba32b08c88a08c0028200008238a0088a02ba88","size":28,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-08-07T00:31:10.736014Z","times_seen":9274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"register-sc-moonton.xyz/static/img/bg@3x.f45b442.png","fqdn":"register-sc-moonton.xyz","domain":"register-sc-moonton.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.756Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/img/bg@3x.f45b442.png HTTP/1.1\r\nHost: register-sc-moonton.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"akmweb.youngjoygame.com/web/common/mlbb_logo_400x147.png","fqdn":"akmweb.youngjoygame.com","domain":"youngjoygame.com","tld":"com"},"ip":{"addr":"95.101.11.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"act.gms.moontontech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 11:25:21 GMT","end":"Wed, 22 Apr 2026 11:25:20 GMT"},"fingerprint":{"sha1":"55:37:CD:F1:12:8C:D7:81:0A:7D:4C:C6:33:22:7C:34:98:88:9E:F0","sha256":"A3:FC:84:28:3B:8B:A6:EE:6E:2F:8D:3D:70:2D:AA:C3:A2:EA:40:B0:87:D9:AF:45:5F:D1:40:BF:8D:BC:FE:9C"}}},"request":{"raw":"GET /web/common/mlbb_logo_400x147.png HTTP/1.1\r\nHost: akmweb.youngjoygame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: iRCS4WmqxugRwY0gvMR6pnBvaoih50hjpNtQfBID22Y0Yw+xqafSgvVl/7/SXXyqm+we+lyVq70=\r\nx-amz-request-id: 051S5H8ZT8EH70M7\r\nlast-modified: Mon, 30 Dec 2024 11:23:23 GMT\r\netag: \"26ee9763baeb1f68ba8fe088edd40106\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version-id: null\r\nx-amz-meta-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 14419\r\nserver: AmazonS3\r\ncache-control: max-age=2196228\r\nexpires: Fri, 24 Apr 2026 22:18:06 GMT\r\ndate: Mon, 30 Mar 2026 12:14:18 GMT\r\nakamai-mon-iucid-del: 1172575\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nx-parent-response-time: 45,95.101.11.12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 147, 8-bit colormap, non-interlaced","md5":"26ee9763baeb1f68ba8fe088edd40106","sha1":"a8971ddf3bcdcf83d70b92b7bd83fed6b527e087","sha256":"aa88b87be5423cb18fe7d55bb82b6136ea3ba685305ddcb7eb463c05c36d63e5","sha512":"cd46c7b2f29346ac08c7a1dc8f879bb5f18c6a29dd1c833e89cce51ca46140ed32a5be691487a36921ca8467576bdbf03aff4dda2f2d252769a827a7b8a0a536","ssdeep":"192:6hAyHgeL4nV5BusegDQILAT/JF/0BordM3y0LRDBDeEiO+NGDIQ7J9UasuILzYRL:o45XDheJFKorOy03Dez7G0MJ9pIfpmt5","tlshash":"7a52c0bff7201852484c7f31b78ef5811905c27b23a7938d41e6955d09d19f86378dba","first_seen":"2025-06-19T10:38:43.021153Z","last_seen":"2026-03-30T14:43:25.612977Z","times_seen":7,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/ir.2.0.13.min.js?v=29581214","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.194","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:23.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.126.net","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 24 Nov 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:DA:FF:25:CA:C1:B3:2A:07:EC:89:18:8B:11:75:86:A2:1C:76:1B","sha256":"90:30:8B:08:91:13:6D:6B:5C:CF:09:D3:67:EB:12:8E:34:F1:0D:37:08:1E:95:E3:D2:CE:B7:41:B4:A1:DA:E1"}}},"request":{"raw":"GET /ir.2.0.13.min.js?v=29581214 HTTP/1.1\r\nHost: cstaticdun.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 40784\r\nConnection: keep-alive\r\nDate: Mon, 30 Mar 2026 07:06:42 GMT\r\nTiming-Allow-Origin: *\r\nCache-Control: max-age=43200\r\nExpires: Mon, 26 Jan 2026 07:11:42 GMT\r\nVia: ens-cache49.l2nu20-20[0,0,304-0,H], ens-cache39.l2nu20-20[1,0], ens-cache42.l2hk11[0,0,304-0,H], ens-cache39.l2hk11[1,0], ens-cache29.l2de4[0,0,304-0,H], ens-cache32.l2de4[0,0], ens-cache17.fr4[0,0,200-0,H], ens-cache12.fr4[1,0]\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 26 Jan 2026 06:52:16 GMT\r\nVary: Accept-Encoding\r\nAge: 18461\r\nAli-Swift-Global-Savetime: 1774854402\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Mon, 30 Mar 2026 07:06:43 GMT\r\nX-Swift-CacheTime: 43199\r\ncdn-user-ip: 91.90.42.154\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS,HEAD\r\nAccess-Control-Allow-Origin: *\r\ncdn-source: ali\r\nAccess-Control-Allow-Headers: *\r\ncdn-ip: 47.246.50.194\r\nEagleId: 2ff632a017748728631311260e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":97348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"efd73a3f4db0aa3c50ec127eb8866d46","sha1":"e30009ab604c53c1dd9245876e44dda93dda956d","sha256":"c96a0feb5eb853d0fb85142fc727ab449025863c52ad59afce22f67dde9fa9ef","sha512":"dbe642e757cfbc97c2a5797758a80f8985f3f345f684b4e81613c0c51f0122909831673cac082dffccf06c56c7431e06b0483a07b16567be3d4e337f17c2248b","ssdeep":"1536:w5+fWmazAIoFzOIv23e1rE0gt33ZIFF8bvvxAKcfu9wntIhhTGK:nzFzONeu1ZwBu2nehMK","tlshash":"ae93f6d875c2b52642639676013f140fb12e1da0295ca058da32f6ef7d3931ed1affa8","first_seen":"2026-01-26T11:18:23.941077Z","last_seen":"2026-07-17T00:00:00.570059Z","times_seen":1439,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.195","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:23.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.126.net","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 24 Nov 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:DA:FF:25:CA:C1:B3:2A:07:EC:89:18:8B:11:75:86:A2:1C:76:1B","sha256":"90:30:8B:08:91:13:6D:6B:5C:CF:09:D3:67:EB:12:8E:34:F1:0D:37:08:1E:95:E3:D2:CE:B7:41:B4:A1:DA:E1"}}},"request":{"raw":"GET /2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121 HTTP/1.1\r\nHost: cstaticdun.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 183011\r\nConnection: keep-alive\r\nDate: Mon, 30 Mar 2026 03:51:33 GMT\r\nTiming-Allow-Origin: *\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 24 Feb 2025 02:58:07 GMT\r\nCache-Control: max-age=43200\r\nExpires: Mon, 23 Mar 2026 02:30:19 GMT\r\nContent-Encoding: gzip\r\nVia: cache27.l2so158-1[63,14,200-0,C], cache11.l2so158-1[15,0], ens-cache34.l2hk11[0,0,200-0,H], ens-cache21.l2hk11[2,0], ens-cache29.l2de4[0,0,200-0,H], ens-cache6.l2de4[0,0], ens-cache5.fr4[0,0,200-0,H], ens-cache2.fr4[1,0]\r\nAge: 30170\r\nAli-Swift-Global-Savetime: 1774842693\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Mon, 30 Mar 2026 03:51:42 GMT\r\nX-Swift-CacheTime: 43191\r\ncdn-user-ip: 91.90.42.154\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS,HEAD\r\nAccess-Control-Allow-Origin: *\r\ncdn-source: ali\r\nAccess-Control-Allow-Headers: *\r\ncdn-ip: 47.246.50.195\r\nEagleId: 2ff6329617748728632003573e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":631406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2e37138d619d162c07ec319f394979e5","sha1":"d0eeddeecb8b2ba5a2d293b495ef81f6b3df8103","sha256":"de1b1412257aec714dfc50b49e249f925197647dddef3d178ba791612ffc38a2","sha512":"34a91174fe301d3ba732b7f2d9ea39045343be849befcd3d50f20e17fd9302c9b1d85e59accae3f02d9881cda5768e04c9a2045d3296c8b1ee1bbc411c9819b4","ssdeep":"12288:xWHScRo5KuiykhWGajMXiPafixLRdGUN0ZinzYybkZhd1Bp8XXCFK2STS81cts6Z:A0RdGUNQin0ybkZhd1B6XXCFK2STS81S","tlshash":"ffd4b360afc0641d22d74b37722b66dce8570977b940c4679114ff6caaa3729fea8c31","first_seen":"2025-08-11T01:40:48.887978Z","last_seen":"2026-07-14T01:14:01.19385Z","times_seen":3860,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":65,"dns":2,"connect":27,"send":0,"wait":28,"receive":70,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2958121","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:14:18.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"self-service.moontoncs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 13:30:53 GMT","end":"Sat, 27 Jun 2026 13:30:52 GMT"},"fingerprint":{"sha1":"6E:11:5E:2F:6C:06:49:3D:03:55:9A:9A:98:01:C6:FC:69:71:DD:3A","sha256":"48:9D:74:4C:3D:14:26:EB:65:51:E0:A5:09:F2:56:C7:D1:26:81:C5:D4:B8:C8:77:76:B9:5B:91:C8:8D:A8:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: self-service.moontoncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 30 Mar 2026 12:14:18 GMT\r\nlocation: /tools/cancelaccount/login\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9lcpm-1774872858238-ec8d41b350ed\r\ncontent-length: 96\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":10,"receive":157,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"self-service.moontoncs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/load.min.js?v=1747935166229","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.194","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.126.net","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 24 Nov 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:DA:FF:25:CA:C1:B3:2A:07:EC:89:18:8B:11:75:86:A2:1C:76:1B","sha256":"90:30:8B:08:91:13:6D:6B:5C:CF:09:D3:67:EB:12:8E:34:F1:0D:37:08:1E:95:E3:D2:CE:B7:41:B4:A1:DA:E1"}}},"request":{"raw":"GET /load.min.js?v=1747935166229 HTTP/1.1\r\nHost: cstaticdun.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 14400\r\nConnection: keep-alive\r\nDate: Mon, 30 Mar 2026 10:51:34 GMT\r\nTiming-Allow-Origin: *\r\nCache-Control: max-age=43200\r\nExpires: Fri, 27 Mar 2026 22:56:34 GMT\r\nVia: ens-cache22.l2nu20-20[0,0,304-0,H], ens-cache34.l2nu20-20[1,0], ens-cache6.l2hk11[0,0,304-0,H], ens-cache4.l2hk11[1,0], ens-cache24.l2de4[0,0,304-0,H], ens-cache37.l2de4[0,0], ens-cache6.fr4[0,0,200-0,H], ens-cache12.fr4[1,0]\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 25 Mar 2026 01:57:18 GMT\r\nContent-Encoding: gzip\r\nAge: 4966\r\nAli-Swift-Global-Savetime: 1774867894\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Mon, 30 Mar 2026 10:51:35 GMT\r\nX-Swift-CacheTime: 43199\r\ncdn-user-ip: 91.90.42.154\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS,HEAD\r\nAccess-Control-Allow-Origin: *\r\ncdn-source: ali\r\nAccess-Control-Allow-Headers: *\r\ncdn-ip: 47.246.50.194\r\nEagleId: 2ff632a017748728607517760e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":36116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32007)","md5":"cb8efb99a8950ca6b13f38274938882c","sha1":"8ab6335d260069ded73009a539c3bc91404791de","sha256":"2f55203b6eac5a5edbefc7225557ba6bf8f4d869c67525d11d10719a8becd3d5","sha512":"0d60f0db0dc4f5ef4ea8baf1d18d44d20313d436f84d3033453828fbbe856b673a442085290ebaa5627ded58cee3d35a8a5560bd860cf7697330c769bb99275a","ssdeep":"768:9KHK1+h00zI0RAcKvErsQsLiz0I+/QtzfS5+8hfgVCMiE:9ChrsQa6tjS5D5gEE","tlshash":"2ef2d68cb690f4bb4ba76070813f920be13b5614b499c0e4b155e5e4adbd8ce5627f3c","first_seen":"2026-03-25T12:02:18.210304Z","last_seen":"2026-04-08T10:38:07.655442Z","times_seen":533,"resource_available":true,"data":null}},"time_used":4067,"timings":{"blocked":2013,"dns":1145,"connect":27,"send":0,"wait":28,"receive":4,"ssl":847},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"akmweb.youngjoygame.com/web/gms/image/1d4439a2ab14e995b99fd8934adb34ee.svg","fqdn":"akmweb.youngjoygame.com","domain":"youngjoygame.com","tld":"com"},"ip":{"addr":"95.101.11.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:20.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"act.gms.moontontech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 11:25:21 GMT","end":"Wed, 22 Apr 2026 11:25:20 GMT"},"fingerprint":{"sha1":"55:37:CD:F1:12:8C:D7:81:0A:7D:4C:C6:33:22:7C:34:98:88:9E:F0","sha256":"A3:FC:84:28:3B:8B:A6:EE:6E:2F:8D:3D:70:2D:AA:C3:A2:EA:40:B0:87:D9:AF:45:5F:D1:40:BF:8D:BC:FE:9C"}}},"request":{"raw":"GET /web/gms/image/1d4439a2ab14e995b99fd8934adb34ee.svg HTTP/1.1\r\nHost: akmweb.youngjoygame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: DysFqGzjjskmnR1jUIfiGuc+DEOQVrQDV/QJg6DPge5vmBDl7RqpBh6dUFLKznONknRzkWqUIliOF68uS8eEsSWtFVQLpFN8\r\nx-amz-request-id: XQA6V3D5PSJA2XFR\r\nlast-modified: Tue, 10 Dec 2024 07:23:35 GMT\r\netag: \"dbb6f5cabfb92b02ed3a7f55491b2acc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ncontent-length: 1240\r\ncache-control: max-age=1820098\r\nexpires: Mon, 20 Apr 2026 13:49:18 GMT\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\nvary: Accept-Encoding\r\nakamai-mon-iucid-del: 1172575\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbb6f5cabfb92b02ed3a7f55491b2acc","sha1":"687ca97efc14adc00f1aa4ce8a1d4bc65edc678d","sha256":"8da14fad7313ab0a024414c81cedb1c1686fb4541ac5fc5ed959e106fd9c7644","sha512":"98a3b2c90b01a3401d8be9c25ae15257b379fd3fa0af8a1d17622e491c2642546263475de45df2289879494b288b787059dc64b6dbca587999cbd937460eae2b","ssdeep":"","tlshash":"8b41517f435e8b65a1885748c62054863620d0d7b5b4d298f7bf6b8c8f1adf31428b54","first_seen":"2025-01-05T11:26:21.058332Z","last_seen":"2026-05-03T06:17:34.54307Z","times_seen":310,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.mobilelegends.com/base/report/report.js","fqdn":"play.mobilelegends.com","domain":"mobilelegends.com","tld":"com"},"ip":{"addr":"23.36.76.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"act.gms.moontontech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 11:25:21 GMT","end":"Wed, 22 Apr 2026 11:25:20 GMT"},"fingerprint":{"sha1":"55:37:CD:F1:12:8C:D7:81:0A:7D:4C:C6:33:22:7C:34:98:88:9E:F0","sha256":"A3:FC:84:28:3B:8B:A6:EE:6E:2F:8D:3D:70:2D:AA:C3:A2:EA:40:B0:87:D9:AF:45:5F:D1:40:BF:8D:BC:FE:9C"}}},"request":{"raw":"GET /base/report/report.js HTTP/1.1\r\nHost: play.mobilelegends.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Oct 2022 07:40:26 GMT\r\netag: W/\"6356416a-2846\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-CustomHeader,X-LANG,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,X-Api-Key,X-Device-Id,Access-Control-Allow-Origin,x-token,x-project-id,sign,roleId,escaped,zoneId,deviceId,token,language,clientparam\r\naccess-control-max-age: 1728000\r\ncontent-length: 3805\r\ncache-control: max-age=1800\r\nexpires: Mon, 30 Mar 2026 12:44:19 GMT\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\nvary: Accept-Encoding\r\nx-parent-response-time: 106,23.36.76.182\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10310), with no line terminators","md5":"d7ad59223a072e29d8880cd2c5fe5600","sha1":"cec3c2a8bb879da66a9f32610f0cbe5a151ff9d7","sha256":"20ecb395779c1b242b78e0ec46ebc82a32b48e781568a7df9cb8f7c4cd0bb5a3","sha512":"c81cf6ace9931026855ee15186cea467c47d00ddeec11903d4744a71665d0893fc0c0604221a027d97de47fd2c723a6e3cfee4f04fabb109b27915a740c8b7aa","ssdeep":"192:mMcIzyXXVDBVK+bdIVNaLcraZVdDOnR80UpCaPcbaiDv:sSyXltk+JANNrcVdKnRjaPAPT","tlshash":"eb22d66cb2c1f82a03a631e5244b4501633b990a69d6c18cf726ccd5aa7dd5fa037fbd","first_seen":"2023-03-13T22:08:37Z","last_seen":"2026-03-30T14:43:25.606775Z","times_seen":7,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":366,"dns":351,"connect":1,"send":0,"wait":127,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"akmweb.youngjoygame.com/web/common/moonton_logo_100x83.png","fqdn":"akmweb.youngjoygame.com","domain":"youngjoygame.com","tld":"com"},"ip":{"addr":"95.101.11.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"act.gms.moontontech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 11:25:21 GMT","end":"Wed, 22 Apr 2026 11:25:20 GMT"},"fingerprint":{"sha1":"55:37:CD:F1:12:8C:D7:81:0A:7D:4C:C6:33:22:7C:34:98:88:9E:F0","sha256":"A3:FC:84:28:3B:8B:A6:EE:6E:2F:8D:3D:70:2D:AA:C3:A2:EA:40:B0:87:D9:AF:45:5F:D1:40:BF:8D:BC:FE:9C"}}},"request":{"raw":"GET /web/common/moonton_logo_100x83.png HTTP/1.1\r\nHost: akmweb.youngjoygame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: lKkBQwZV/oFApF8QISdzeeFllC4BzBHAOqBkck8p48Y5p0HJ5uUFfOfBExBYPlp975/5wj76S0LZodNHA6ny6GNJTtyBrSSj\r\nx-amz-request-id: 45Z11K2H4MCE0E05\r\nlast-modified: Fri, 23 Feb 2024 10:53:40 GMT\r\netag: \"5f0a07f3a6d0891f53161e6d2ec1bed5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 7491\r\nserver: AmazonS3\r\ncache-control: max-age=2428654\r\nexpires: Mon, 27 Apr 2026 14:51:52 GMT\r\ndate: Mon, 30 Mar 2026 12:14:18 GMT\r\nakamai-mon-iucid-del: 1172575\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nx-parent-response-time: 14,95.101.11.12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 83, 8-bit/color RGBA, non-interlaced","md5":"5f0a07f3a6d0891f53161e6d2ec1bed5","sha1":"3c9a72abbd0a7504974553e3e4dada2f0059708c","sha256":"744801a8014b3fb73118895a6812eb75bf49bf6c008481b2754b790720d806a9","sha512":"7892c1401e390d408a2e6bec4374880959f490f9829df552732a98842620521d7cd80e22020080810810b3e4de49e2397dc929205d861934c9d9a721da879167","ssdeep":"192:x7Rlq+2XieAMC0ZRf6O9TODUSEvI46mVz+lLV:96SeAr0Z1RLSizuV","tlshash":"83f19faff56a4249f85c89e161bea0950b512dd682e07cf4fc1e8acc67ac50766482c9","first_seen":"2025-06-19T10:38:43.020089Z","last_seen":"2026-03-30T14:43:25.610993Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-sc-moonton.xyz/static/img/bg@3x.f45b442.png","fqdn":"register-sc-moonton.xyz","domain":"register-sc-moonton.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:20.843Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/img/bg@3x.f45b442.png HTTP/1.1\r\nHost: register-sc-moonton.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.dun.163.com/api/v2/getconf?referer=https%3A%2F%2Fself-service.moontoncs.com%2Ftools%2Fcancelaccount%2Flogin\u0026zoneId=\u0026id=fef5c67c39074e9d845f4bf579cc07af\u0026ipv6=false\u0026runEnv=10\u0026iv=5\u0026loadVersion=2.5.4\u0026lang=en-US\u0026callback=__JSONP_b5q36ir_0","fqdn":"c.dun.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"47.245.156.151","port":443,"asn":134963,"as":"Alibaba Cloud Singapore Private Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:20.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.dun.163.com","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 25 Dec 2025 00:00:00 GMT","end":"Sat, 23 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:0E:CB:7F:08:DE:00:09:B1:C3:01:29:02:69:24:3C:F6:42:4B:A7","sha256":"A2:ED:C7:46:F2:6B:B1:DB:D9:65:07:60:BF:D3:72:29:C6:F4:E4:4D:7E:AB:7B:0F:47:2C:6F:6F:98:55:5B:FE"}}},"request":{"raw":"GET /api/v2/getconf?referer=https%3A%2F%2Fself-service.moontoncs.com%2Ftools%2Fcancelaccount%2Flogin\u0026zoneId=\u0026id=fef5c67c39074e9d845f4bf579cc07af\u0026ipv6=false\u0026runEnv=10\u0026iv=5\u0026loadVersion=2.5.4\u0026lang=en-US\u0026callback=__JSONP_b5q36ir_0 HTTP/1.1\r\nHost: c.dun.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 30 Mar 2026 12:14:23 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nP3P: CP=\"CAO PSA OUR\"\r\nSet-Cookie: _gid=GA.2067417311.80875277678929\r\nTiming-Allow-Origin: *\r\nCache-Control: no-store\r\nX-Via: CN31,CN31\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":812,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (812), with no line terminators","md5":"fcda9250775897ed17d1513fe77da1bc","sha1":"0ad1b532730f6819f95cbb4ff9a76038f3b38d25","sha256":"b0ef5d1883f75f51fbb963014975cfb83c5722267a6002d558555de5c7c88e84","sha512":"09cfffc48c2f700c7f9166addf3a761d69dfc453402509aa942480f8cad073b7cfed87af0f7447f556a48d6344a09581053dadecd92cf03c2675b2baf4e8f48d","ssdeep":"","tlshash":"fe01f10c006c84be4c9598c5ad5a1c056b39b461bf29fb4ecb560847c35e3bc634349b","first_seen":"2026-03-30T12:14:47.328862Z","last_seen":"2026-03-30T12:14:47.328862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4091,"timings":{"blocked":1898,"dns":1582,"connect":20,"send":0,"wait":287,"receive":2,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/tools/cancelaccount/login","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:14:18.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"self-service.moontoncs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 13:30:53 GMT","end":"Sat, 27 Jun 2026 13:30:52 GMT"},"fingerprint":{"sha1":"6E:11:5E:2F:6C:06:49:3D:03:55:9A:9A:98:01:C6:FC:69:71:DD:3A","sha256":"48:9D:74:4C:3D:14:26:EB:65:51:E0:A5:09:F2:56:C7:D1:26:81:C5:D4:B8:C8:77:76:B9:5B:91:C8:8D:A8:43"}}},"request":{"raw":"GET /tools/cancelaccount/login HTTP/1.1\r\nHost: self-service.moontoncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 30 Mar 2026 12:14:18 GMT\r\netag: W/\"5ee5-YnVYzG4XYXmmvsRKzU1oN7QU3x8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9lcpm-1774872858412-665859d3497d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (699)","md5":"70fbe663181e93b8336b38fd65e80da2","sha1":"627558cc6e176179a6bec44acd4d6837b414df1f","sha256":"870db0f1c0b2f9d7380d0c84f8a69431c36d3fd0df1e3f13595dc751c691b0d7","sha512":"10307c6cd98dfeaff1ad0324eabf7aead7deefd028b7278ba57b1885bc4b741024b9f0b5d6ed0a00be9e29bca3b2ac8a0bda1ebf017181d90d2116f0b0b89c27","ssdeep":"192:jkfy6RJP66wd/YT4b/YTIYkQxS1R4RX/Ye89eWM2M0J0MaXMMpbUfT1Q9tXu7xuN:gCbXYkWS4j0idciUfpWulaIi9XFRmHmx","tlshash":"2db2d766a8f3040205b7507526afa50a2e63801bc40ddc057facc7e4afc6f5dea67add","first_seen":"2025-12-07T05:09:55.42414Z","last_seen":"2026-03-30T14:43:25.609209Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"self-service.moontoncs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30462\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 07:51:53 GMT\r\nexpires: Fri, 26 Mar 2027 07:51:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 12 Sep 2023 02:38:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 361346\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T00:39:03.844421Z","times_seen":184966,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":240,"dns":0,"connect":28,"send":0,"wait":29,"receive":29,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"self-service.moontoncs.com/app.12350fe7e7ddf6841f0c27ce42cfdfec.css","fqdn":"self-service.moontoncs.com","domain":"moontoncs.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://self-service.moontoncs.com/tools/cancelaccount/login","date":"2026-03-30T12:14:18.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"self-service.moontoncs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 13:30:53 GMT","end":"Sat, 27 Jun 2026 13:30:52 GMT"},"fingerprint":{"sha1":"6E:11:5E:2F:6C:06:49:3D:03:55:9A:9A:98:01:C6:FC:69:71:DD:3A","sha256":"48:9D:74:4C:3D:14:26:EB:65:51:E0:A5:09:F2:56:C7:D1:26:81:C5:D4:B8:C8:77:76:B9:5B:91:C8:8D:A8:43"}}},"request":{"raw":"GET /app.12350fe7e7ddf6841f0c27ce42cfdfec.css HTTP/1.1\r\nHost: self-service.moontoncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://self-service.moontoncs.com/tools/cancelaccount/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22412\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"app.12350fe7e7ddf6841f0c27ce42cfdfec.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 30 Mar 2026 12:14:18 GMT\r\netag: \"717ba6b0017e090a85ec2a48579668ba\"\r\nlast-modified: Mon, 30 Mar 2026 06:00:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lpqff-1774872858751-e7cc0f14ef56\r\ncontent-length: 22500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100675,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10454), with CRLF line terminators","md5":"e2211a8b1a1101278426fffd50e68e90","sha1":"9b2d753e673641e46e7d1d9c148c7400cce2559e","sha256":"5f2fcf53e28a33879cdf77bbc2c592e993e188eb3c7fe3283953c5280e46bfdb","sha512":"11f55a55bc6653cfd7f1d0b165e1df067e0dbe3aeaedfceb2410ba4e13b70ca522cb464248bfb3a7e298b78dc8cff05fe740d4d9c64c8e5673e1069d1affdc76","ssdeep":"1536:hboPM7bzVbGCriZxyW+gYR+mHARfese8s0szZxdlfese8s0szlgkZilHCqfese8W:7X8sBzLY8sBzklG8sBzZorq","tlshash":"cba32a289502494b9636cab81fe09645e6d940b3de03527c7fc3a258cff532467b6f8e","first_seen":"2025-12-07T05:09:55.420726Z","last_seen":"2026-03-30T14:43:25.609932Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"self-service.moontoncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"self-service.moontoncs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}