{"report_id":"20be72e3-069e-417b-828d-5e557436c3a9","version":6,"status":"done","tags":[],"date":"2025-08-17T14:22:04Z","url":{"schema":"http","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"title":"Phantom Wallet | Download Extension | Crypto \u0026 NFT Wallet"},"submit":{"url":{"schema":"http","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T14:22:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"phantomsol.at","ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-17T14:22:05.461083Z","last_seen":"2025-08-17T14:22:05.461083Z","alert_count":12,"request_count":12,"received_data":2168711,"sent_data":5405,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomsol.at/js/jquery-3.6.1.min.js","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-23T00:44:27.457395Z","times_seen":33692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/js/ethers-5.2.umd.min.js","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"50ed955cf32ac8e4e1daa0fac8fcde98","sha1":"fc073f2b9715e44dc2346d7cbe0b491fb59da146","sha256":"c2bcdc085e0557a379a6056c629be748d22a3c1dbe539a48ae02de7d69c95eff","sha512":"62b27b6739ad99525dc02c2ee81f754e15062df363b137477f521d3dfdc9ec0650229543bda85c04b5a8282d5e6d9f5137aba99bd66178814a49feecee4fd961","ssdeep":"12288:YPEmxeUs6ky8Xb863bkmCEuls/LaottWsv1TY4:YPTWbsEss/LtttJz","tlshash":"4df44b85b3a5b0b583c628a4143f5006f63af46b502c40a4f759faf269f9d8c957bb3c","size":733070,"data":"","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-07-22T10:31:13.82982Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd60de2ca272d5b8390d2ee3d5f250d0","sha1":"7f4699e56ee7bce6553fea522004e43fc1ef23b8","sha256":"3f1b4fd0e565434d48726ce7acc5f07f65005781ae82106b8eeadc67d3e50950","sha512":"9e17ceab0dd50e72a9e29c45d95444b7f722cec4736975ff66e8cc456eededdaf4f3875ad9cbd3b92e98451d12809fa508e0d9a8f21208ffacb45b4eda394d98","ssdeep":"384:XPEbctMv23GhbLQ8mm84sttVFVVdg2xhgEWOn7JQ8F8mldv0ywZ8n1zxDtDRTYMM:XPmYrs/7Zd","tlshash":"06c283513680a53ec1072fde61e29a5f216b71cfc74409a8bdad66d1df80ea188376bc","size":26746,"data":"","first_seen":"2025-08-17T14:22:09.169691Z","last_seen":"2025-08-17T14:22:09.169691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T14:21:44.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45031,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7271), with CRLF line terminators","md5":"e3e11cf58f28597294b75cdd4c6be8ee","sha1":"1d67b224cdcf2d5261c2985f7ac0156dff6a9e2e","sha256":"36d409231ac67b388b21f33451cc26f5cc8ec908cc276a7b706e1b706e861c23","sha512":"439ace6d73d19e9aa2d64d71f1df9100e35157fb14711d8825194e1db0d36934c4cf5564056bedb09e4ed07728516213320452144de59cf10a2f3834806318dc","ssdeep":"768:QP3aO0yWRHFr19XhjLUFJ9curnUBLuoBUJNPtYEst7Z5:WVKEst7Z5","tlshash":"8913f8623740a12dc0235bdbb4a2cbaf612770cfd745066cf9ac2696dbd0d9189377e8","first_seen":"2025-08-17T14:22:09.160356Z","last_seen":"2025-08-17T14:22:09.160356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":298,"dns":1,"connect":44,"send":0,"wait":137,"receive":1,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/popup.c34c79ff.css","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:45.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /popup.c34c79ff.css HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:45 GMT\r\nContent-Type: text/css\r\nContent-Length: 971\r\nLast-Modified: Thu, 13 Feb 2025 11:08:36 GMT\r\nConnection: keep-alive\r\nETag: \"67add2b4-3cb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (923)","md5":"1c0eff64531617e6cbeb6600289b221f","sha1":"1c0d16ed3fb8ba61efa0fa28ee18edde9f1a59c6","sha256":"fc4fc69adeaa80c65698af1ef46fe9992f232dc769928409f18afa8b6db9225a","sha512":"a6a7c8ed6285a4e0b4228c55421571a6d705e3dc8db4c6785151453fb7d42d8a3866717028b08a9913c75a2ca1c2b03b392f01ebfbb72d31a731a7eee78824dd","ssdeep":"","tlshash":"9611e61815afa845d4729e4231cf3922bd164468a2694522d27e0d5eccfbd7393f1f3a","first_seen":"2024-10-11T08:50:23.920468Z","last_seen":"2026-04-27T07:42:14.197263Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":468,"dns":1,"connect":43,"send":0,"wait":333,"receive":0,"ssl":425},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/js/ethers-5.2.umd.min.js","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:45.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /js/ethers-5.2.umd.min.js HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:45 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 733070\r\nLast-Modified: Thu, 13 Feb 2025 11:08:45 GMT\r\nConnection: keep-alive\r\nETag: \"67add2bd-b2f8e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":733070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"50ed955cf32ac8e4e1daa0fac8fcde98","sha1":"fc073f2b9715e44dc2346d7cbe0b491fb59da146","sha256":"c2bcdc085e0557a379a6056c629be748d22a3c1dbe539a48ae02de7d69c95eff","sha512":"62b27b6739ad99525dc02c2ee81f754e15062df363b137477f521d3dfdc9ec0650229543bda85c04b5a8282d5e6d9f5137aba99bd66178814a49feecee4fd961","ssdeep":"12288:YPEmxeUs6ky8Xb863bkmCEuls/LaottWsv1TY4:YPTWbsEss/LtttJz","tlshash":"4df44b85b3a5b0b583c628a4143f5006f63af46b502c40a4f759faf269f9d8c957bb3c","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-07-22T10:31:13.82982Z","times_seen":1158,"resource_available":true,"data":null}},"time_used":2866,"timings":{"blocked":838,"dns":0,"connect":348,"send":0,"wait":164,"receive":1019,"ssl":494},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/Inter-Regular.3b5c1ea8.woff","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:46.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /Inter-Regular.3b5c1ea8.woff HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/popup.c34c79ff.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:46 GMT\r\nContent-Type: application/font-woff\r\nContent-Length: 133856\r\nLast-Modified: Thu, 13 Feb 2025 11:08:33 GMT\r\nConnection: keep-alive\r\nETag: \"67add2b1-20ae0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133856,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 133856, version 0.0","md5":"14d1275c67676cc5d911232d0c890d97","sha1":"b5541b2654eeeffb8e709cfe141a75644e53e9ba","sha256":"3710e2ce073ec0eb39274decc63768b52091a27e35f5c28d6abb7a5fcef0b7fc","sha512":"f29574b0d8173a667ed53dd2bec01a0d0b126637d61a011220c82957c303053b066308681ed05ab7aae999625a750e44d8fc09f9b6665815d86d08f9944ebb7b","ssdeep":"3072:wdJVqGxK6l7L8NEcHOW3d7TA/O0PcGt6TstGUPResU1ZiZCm:wdJVa6NLjcHZ3BAWcjybm","tlshash":"35d312c4eca1ad4bb333e79fdc60b64fe938d8176c39904a41a3c39e23a6e5481d8059","first_seen":"2023-05-11T13:56:46Z","last_seen":"2026-06-30T04:30:15.851708Z","times_seen":312,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/Inter-SemiBold.02b70154.woff","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:47.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /Inter-SemiBold.02b70154.woff HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/popup.c34c79ff.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:47 GMT\r\nContent-Type: application/font-woff\r\nContent-Length: 142760\r\nLast-Modified: Thu, 13 Feb 2025 11:08:33 GMT\r\nConnection: keep-alive\r\nETag: \"67add2b1-22da8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142760,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 142760, version 0.0","md5":"1d5bb5c64dc15405bdb04145dab7b436","sha1":"b1998ff442a405f783f2969a30c73eae62809d9a","sha256":"807d56b95fcc04cd1c26fca043ddf19e300c8ae156747458bd025a2b21cf54b4","sha512":"1854e0ed3d16e4304abe68a6fbeeb4bc852b678f60fa12ccd48b507b0ee6ad4711c36625d9ea3a6deca84a5ca909b3f28b12e6943aae5d386982b57d2aaa77d9","ssdeep":"3072:woGCVBMa0wOu0YcxfPHArepYYjnn+95SkuHhsU1ZiZCm:oa0wR0LeepYYjnsAbm","tlshash":"8bd31248fcd1e8c37396fc5b8afc5f2a237ad7117c5ae46a807e348b1a64c84c5d4469","first_seen":"2023-05-11T13:56:46Z","last_seen":"2026-06-06T07:27:26.273402Z","times_seen":83,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":778,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T14:21:42.018Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":288,"dns":0,"connect":42,"send":0,"wait":0,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":80,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T14:21:42.531Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nserver: nginx\r\ndate: Sun, 17 Aug 2025 14:21:42 GMT\r\ncontent-type: text/html\r\ncontent-length: 178\r\nlocation: https://phantomsol.at/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":43,"dns":1,"connect":43,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T14:21:42.724Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":248,"dns":0,"connect":183,"send":0,"wait":0,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/style.css","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:45.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:45 GMT\r\nContent-Type: text/css\r\nContent-Length: 737573\r\nLast-Modified: Thu, 13 Feb 2025 11:08:37 GMT\r\nConnection: keep-alive\r\nETag: \"67add2b5-b4125\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":737573,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63545a2c96e327ecf8655decf1eb906c","sha1":"8eba5b409906d6b55f2a844b15764dbf4554fa4c","sha256":"743c63a5acd1aa7d416d21b780989d5302b8a9688fa562c816ac0aa6b8492fa3","sha512":"50c16684e1e7c2ce3d6b68afd91bf5e2f1afc208b21bc47ed10430162a6e8cf425782210fe351ecab36509df02fa92c8b13328d0126de5b5aee79d5db3a1b399","ssdeep":"6144:I1jA3uIL43Ml7S+SDvdqV/TSsrHw3ae1jA3uIL43Ml7S+SDvdqV/TSsrHw3aG2kx:oz3aqz3aG2kqz3aqz3aG29B","tlshash":"73f4449bd2007c2dea67a3bdd143d4ceff790289ba05c3bb75425ae4c648547db827a0","first_seen":"2024-10-11T08:50:23.931213Z","last_seen":"2026-04-27T07:42:14.227287Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/popup.5cbd182e.css","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:45.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /popup.5cbd182e.css HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:45 GMT\r\nContent-Type: text/css\r\nContent-Length: 283145\r\nLast-Modified: Thu, 13 Feb 2025 11:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"67add2b3-45209\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283145,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ba4c1af6ab5dc69a6d6433b0822403c6","sha1":"23afaf2bf14441bff15c453e7157bf77f029a561","sha256":"d48f095841d6a8bc96aa232c4d62cf12a0f3558a4e6e21e9af85e947b3d96397","sha512":"224b1c203a09912460fa311cb449f070a987eb15c954d52ec4cfa09eadf73fce2e93f2eda4bb3292b6d9a10b9c94a533f043da7502fb0b670e8c05441ace4695","ssdeep":"1536:apKSQ3YyI/obeboL0T1+3tKSYHpKSQ3YyI/obeboL0T1+3tKSY1fmEcKfmEcm:7SDgbqil3YJMSDgbqil3YJxZT","tlshash":"4254992fe300243eed27831de143fe9da1775f99ba42c777b89228d49281993db93650","first_seen":"2024-10-11T08:50:23.926884Z","last_seen":"2026-04-27T07:42:14.193367Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1570,"timings":{"blocked":469,"dns":1,"connect":42,"send":0,"wait":387,"receive":241,"ssl":428},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/js/jquery-3.6.1.min.js","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:45.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /js/jquery-3.6.1.min.js HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:45 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89664\r\nLast-Modified: Thu, 13 Feb 2025 11:08:43 GMT\r\nConnection: keep-alive\r\nETag: \"67add2bb-15e40\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-23T00:44:27.457395Z","times_seen":33692,"resource_available":true,"data":null}},"time_used":1776,"timings":{"blocked":716,"dns":1,"connect":42,"send":0,"wait":177,"receive":163,"ssl":671},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomsol.at/icon16.png","fqdn":"phantomsol.at","domain":"phantomsol.at","tld":"at"},"ip":{"addr":"185.26.120.99","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomsol.at/","date":"2025-08-17T14:21:47.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"phantomsol.at","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 19:10:09 GMT","end":"Sun, 27 Apr 2025 19:10:08 GMT"},"fingerprint":{"sha1":"9A:31:1C:20:B9:C3:B3:73:7E:63:7F:32:8B:B9:2E:B9:1B:F0:7E:B0","sha256":"E6:6F:7E:7C:0F:EB:BA:5D:6E:B3:64:F9:E9:3E:0A:61:30:8A:BD:D5:09:9E:B8:E3:41:B9:4E:A9:D1:35:36:52"}}},"request":{"raw":"GET /icon16.png HTTP/1.1\r\nHost: phantomsol.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomsol.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 14:21:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 364\r\nLast-Modified: Thu, 13 Feb 2025 11:08:28 GMT\r\nConnection: keep-alive\r\nETag: \"67add2ac-16c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"96ab8d2301b867d7e4113af5ebc59dd1","sha1":"87064faf66f6f06de4a39d2f31f86aaddd5350de","sha256":"267954ddd65f611106bb05d30b472e929726bee357a34565c3e6b5f4dfa24ae2","sha512":"c55573477e2596d22935abf6a4a03a5446833c18d5b61075c0a0604248fe604d7b151df8b5c75a224e87ed151ba3e2a9dbbc6e9c2b77bcdc41a0aeeaf5bbf81e","ssdeep":"","tlshash":"a7e0f110729854a5da834db78283d958e66060540b1583cc09019439419025da730569","first_seen":"2024-10-11T08:50:23.933597Z","last_seen":"2026-04-27T07:42:14.210057Z","times_seen":37,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"phantomsol.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}