curl -i "https://staging.tothemoon.com/account/settings?userId=12345"
curl -i "https://staging.tothemoon.com/api/user?userId=12345"
HTTP/2 200
content-type: text/html; charset=utf-8
content-length: 461123
date: Tue, 24 Feb 2026 01:59:25 GMT
content-security-policy: frame-src * https://bid.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com; default-src 'self' https://sentry-prod.cryptology.com/; script-src 'self' blob: 'unsafe-inline' https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://apis.google.com https://*.googleapis.com https://fonts.gstatic.com https://stats.g.doubleclick.net/ https://*.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://*.firebaseio.com wss://*.firebaseio.com https://connect.facebook.net https://www.redditstatic.com https://static.hotjar.com https://script.hotjar.com https://s.adroll.com https://d.adroll.com https://*.cookiebot.com/ https://wchat.freshchat.com https://hcaptcha.com https://*.hcaptcha.com https://sentry-prod.cryptology.com/api/embed/error-page/ https://sentry-dev.cryptology.com/api/embed/error-page/ https://pay.google.com https://static.tracknow.io ; style-src 'self' blob: https://*.cryptology.com https://*.tothemoon.com 'unsafe-inline' https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://fonts.googleapis.com https://wchat.freshchat.com/widget/css/ https://wchat.freshchat.com/css/ https://hcaptcha.com https://*.hcaptcha.com; worker-src 'self' blob:; connect-src 'self' blob: https://*.cryptology.com https://cryptology.com https://*.tothemoon.com https://tothemoon.com wss://*.cryptology.com https://*.cryptology.com:2083 https://*.tothemoon.com:2083 https://s3.eu-central-1.amazonaws.com/public-files.prod.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.staging.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.dev.payments.cryptology.com/ https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://apis.google.com https://*.googleapis.com https://fonts.gstatic.com https://stats.g.doubleclick.net/ https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://www.google.* https://google.* https://pagead2.googlesyndication.com https://*.firebaseio.com wss://*.firebaseio.com https://www.facebook.com/tr/ https://api.coinmarketcap.com https://us.ahows.co/ https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://d.adroll.com https://content.hotjar.io https://*.cookiebot.com/ https://wchat.freshchat.com/js/ https://wchat.freshchat.com/widget/js/ https://wchat.freshchat.com/widget/css/ https://wchat.freshchat.com/css/ https://api.devnet.solana.com/ wss://api.devnet.solana.com/ https://api.stakewiz.com/validator/ https://go.getblock.io/54954a21758f48439cb2d7b6f035fe5f wss://go.getblock.io/257d3b77eac845f889203a7eed7216ec https://hcaptcha.com https://*.hcaptcha.com https://locales.dev.tothemoon.com/ https://locales.prod.tothemoon.com/ https://locales.staging.tothemoon.com/ https://sentry-prod.cryptology.com/ https://sentry-dev.cryptology.com/ https://*.sentry.io/ https://pay.google.com localhost:*; object-src 'none'; child-src 'self' https://cryptology-9a846.firebaseapp.com https://cryptology-9a846.firebaseio.com https://cryptology-dev.firebaseapp.com https://cryptology-dev.firebaseio.com https://cryptology-prod.firebaseapp.com https://cryptology-prod.firebaseio.com https://www.facebook.com/ https://staticxx.facebook.com/; img-src 'self' blob: data: https://s3.eu-central-1.amazonaws.com/public-files.prod.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.staging.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.dev.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/banners-files.prod.banners.cryptology.com/ https://s3.eu-central-1.amazonaws.com/banners-files.staging.banners.cryptology.com/ https://s3.eu-central-1.amazonaws.com/gamification-files.staging.gamification.cryptology.com/ https://s3.eu-central-1.amazonaws.com/gamification-files.prod.gamification.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.prod.reward-center-admin.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.staging.reward-center-admin.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.dev.reward-center-admin.cryptology.com/ https://*.cryptology.com https://cryptology.com https://*.tothemoon.com https://tothemoon.com https://t.co https://analytics.twitter.com https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://*.googleapis.com https://stats.g.doubleclick.net https://*.gstatic.com https://*.googleusercontent.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://www.google.* https://google.* https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/pixel/ https://tsyndicate.com/ https://d.adroll.com https://*.cookiebot.com/ https://downloads.intercomcdn.com https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/; font-src data: https://cryptology.com https://*.cryptology.com https://tothemoon.com https://*.tothemoon.com https://fonts.gstatic.com https://script.hotjar.com localhost:*; form-action 'self' https://connect.facebook.net https://www.facebook.com/tr/; report-uri https://sentry-prod.cryptology.com/api/3/security/?sentry_key=eb8f80e86d924c749ae78ec90505ab1b
expect-ct: max-age=2592000, report-uri=https://sentry-prod.cryptology.com/api/3/security/?sentry_key=eb8f80e86d924c749ae78ec90505ab1b
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: sameorigin
x-download-options: noopen
x-content-type-options: nosniff
referrer-policy: same-origin
x-xss-protection: 1
set-cookie: NEXT_LOCALE=en; Path=/
x-middleware-set-cookie: NEXT_LOCALE=en; Path=/
x-nextjs-cache: HIT
cache-control: s-maxage=31536000, stale-while-revalidate
etag: "n9vbhh89wj9vjx"
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a4215b9f0c46105a3d19a5dca32abcc6.cloudfront.net (CloudFront)
x-amz-cf-pop: PRG50-P2
x-amz-cf-id: ynlt2zkY1HoHIRhexewb_R3QtaRUzzXiLNd2kU_BBqGz2N3DATCmVA==
vary: Origin
Tothemoon - the cryptocurrency exchange of the future | Tothemoon .anticon{display:inline-flex;align-items:center;color:inherit;font-style:normal;line-height:0;text-align:center;text-transform:none;vertical-align:-0.125em;text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;}.anticon >*{line-height:1;}.anticon svg{display:inline-block;}.anticon .anticon .anticon-icon{display:block;}HTTP/2 404
content-type: text/html; charset=utf-8
content-length: 462543
date: Tue, 24 Feb 2026 01:59:27 GMT
content-security-policy: frame-src * https://bid.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com; default-src 'self' https://sentry-prod.cryptology.com/; script-src 'self' blob: 'unsafe-inline' https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://apis.google.com https://*.googleapis.com https://fonts.gstatic.com https://stats.g.doubleclick.net/ https://*.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://*.firebaseio.com wss://*.firebaseio.com https://connect.facebook.net https://www.redditstatic.com https://static.hotjar.com https://script.hotjar.com https://s.adroll.com https://d.adroll.com https://*.cookiebot.com/ https://wchat.freshchat.com https://hcaptcha.com https://*.hcaptcha.com https://sentry-prod.cryptology.com/api/embed/error-page/ https://sentry-dev.cryptology.com/api/embed/error-page/ https://pay.google.com https://static.tracknow.io ; style-src 'self' blob: https://*.cryptology.com https://*.tothemoon.com 'unsafe-inline' https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://fonts.googleapis.com https://wchat.freshchat.com/widget/css/ https://wchat.freshchat.com/css/ https://hcaptcha.com https://*.hcaptcha.com; worker-src 'self' blob:; connect-src 'self' blob: https://*.cryptology.com https://cryptology.com https://*.tothemoon.com https://tothemoon.com wss://*.cryptology.com https://*.cryptology.com:2083 https://*.tothemoon.com:2083 https://s3.eu-central-1.amazonaws.com/public-files.prod.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.staging.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.dev.payments.cryptology.com/ https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://apis.google.com https://*.googleapis.com https://fonts.gstatic.com https://stats.g.doubleclick.net/ https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://www.google.* https://google.* https://pagead2.googlesyndication.com https://*.firebaseio.com wss://*.firebaseio.com https://www.facebook.com/tr/ https://api.coinmarketcap.com https://us.ahows.co/ https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://d.adroll.com https://content.hotjar.io https://*.cookiebot.com/ https://wchat.freshchat.com/js/ https://wchat.freshchat.com/widget/js/ https://wchat.freshchat.com/widget/css/ https://wchat.freshchat.com/css/ https://api.devnet.solana.com/ wss://api.devnet.solana.com/ https://api.stakewiz.com/validator/ https://go.getblock.io/54954a21758f48439cb2d7b6f035fe5f wss://go.getblock.io/257d3b77eac845f889203a7eed7216ec https://hcaptcha.com https://*.hcaptcha.com https://locales.dev.tothemoon.com/ https://locales.prod.tothemoon.com/ https://locales.staging.tothemoon.com/ https://sentry-prod.cryptology.com/ https://sentry-dev.cryptology.com/ https://*.sentry.io/ https://pay.google.com localhost:*; object-src 'none'; child-src 'self' https://cryptology-9a846.firebaseapp.com https://cryptology-9a846.firebaseio.com https://cryptology-dev.firebaseapp.com https://cryptology-dev.firebaseio.com https://cryptology-prod.firebaseapp.com https://cryptology-prod.firebaseio.com https://www.facebook.com/ https://staticxx.facebook.com/; img-src 'self' blob: data: https://s3.eu-central-1.amazonaws.com/public-files.prod.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.staging.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/public-files.dev.payments.cryptology.com/ https://s3.eu-central-1.amazonaws.com/banners-files.prod.banners.cryptology.com/ https://s3.eu-central-1.amazonaws.com/banners-files.staging.banners.cryptology.com/ https://s3.eu-central-1.amazonaws.com/gamification-files.staging.gamification.cryptology.com/ https://s3.eu-central-1.amazonaws.com/gamification-files.prod.gamification.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.prod.reward-center-admin.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.staging.reward-center-admin.cryptology.com/ https://s3.eu-central-1.amazonaws.com/reward-center-files.dev.reward-center-admin.cryptology.com/ https://*.cryptology.com https://cryptology.com https://*.tothemoon.com https://tothemoon.com https://t.co https://analytics.twitter.com https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.google-analytics.com https://*.googleapis.com https://stats.g.doubleclick.net https://*.gstatic.com https://*.googleusercontent.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://*.google.com https://www.google.* https://google.* https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/pixel/ https://tsyndicate.com/ https://d.adroll.com https://*.cookiebot.com/ https://downloads.intercomcdn.com https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/; font-src data: https://cryptology.com https://*.cryptology.com https://tothemoon.com https://*.tothemoon.com https://fonts.gstatic.com https://script.hotjar.com localhost:*; form-action 'self' https://connect.facebook.net https://www.facebook.com/tr/; report-uri https://sentry-prod.cryptology.com/api/3/security/?sentry_key=eb8f80e86d924c749ae78ec90505ab1b
expect-ct: max-age=2592000, report-uri=https://sentry-prod.cryptology.com/api/3/security/?sentry_key=eb8f80e86d924c749ae78ec90505ab1b
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: sameorigin
x-download-options: noopen
x-content-type-options: nosniff
referrer-policy: same-origin
x-xss-protection: 1
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
x-nextjs-cache: HIT
etag: "ikzyt0sqk59wnd"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 3dce922c66174508adcbded25a2fcbfc.cloudfront.net (CloudFront)
x-amz-cf-pop: PRG50-P2
x-amz-cf-id: uA3kazQlbNbsCD-M9vMikMjBBuRqxDnxu0QCwRtkbIlSZ9ycTUO0Sg==
vary: Origin
Tothemoon - the cryptocurrency exchange of the future | Tothemoon ┌─[live@parrot]─[~]
└──╼ $