{"report_id":"232ee7db-1f8c-4b57-9860-33e1d22fe1b3","version":6,"status":"done","tags":[],"date":"2025-06-30T17:52:01Z","url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"title":"Phantom Wallet - Download Phantom The Best Crypto Wallet"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T17:52:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"phantomwallet-t.us","ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2025-05-05","domain_rank":0,"first_seen":"2025-06-30T17:52:01.855819Z","last_seen":"2025-06-30T17:52:01.855819Z","alert_count":11,"request_count":11,"received_data":642675,"sent_data":5255,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a8c48540ac45c68076ef7193c75c09a","sha1":"c29637d18b9d6e4de52ebf91bfa3219125e81479","sha256":"62f24a41e0447b8e05fe3f5d530e7cb9f53a07989a38a1081273b55ee6970fd9","sha512":"960a6eac1e4edc5d67eea0673fe8d974785faa5a0aafcf4dfc3ab73a2a8d196cbf1f6297df41d667cff009ba2a262beaccd08a05dd5b7b82372e737720c004b8","ssdeep":"","tlshash":"0561b89a3735388b317715d2aa3f0e0beb7658361684d034c9b9f7541cb24a3c379e49","size":3242,"data":"","first_seen":"2025-06-30T17:52:04.288362Z","last_seen":"2025-06-30T17:52:04.288362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa75b397dd3e2234a0e2860ecea9ea5d","sha1":"e73f548edd98b1f37d16cf1a9fe5ada86ef6092c","sha256":"a4b595bb2c5f7cab0f060a8cf2cef4081f7a794da77b3341110107aa9e5e901b","sha512":"38a453bb9f76bf47665cf92c432edb5cb37eb1f12c5176bbd47d0b2b6460b127159b5ee38c84b75d09698e6c26f39b57861e03b334c1ea541c5d55b22af970fe","ssdeep":"","tlshash":"0dc0121002821d0176db9d5290118e94b0fd81a1d1d4f49d697c451863d7a1e1a59108","size":184,"data":"","first_seen":"2025-04-15T12:46:58.983513Z","last_seen":"2026-07-10T15:34:34.895135Z","times_seen":6361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.0","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae769a2b59df43b99eacb70df55fb811","sha1":"0087a940209ac6e75a5ae7060cb13008b5218d08","sha256":"e1d8d99d3074de7fc8747888add39735ddbe463a6f8f31b66e16193886f2afb5","sha512":"de67274ec9ea13f63c882107b8901bce09c96f270e4422a78e62dbae3765fabc7c04286249c56982f897ab0bde7b42a590cd16a0ab49d1cea46fe0d466c7018d","ssdeep":"768:uYEPx60boEcFDTHjGQoDo3oEK2AfR0cLltNmx6Eq2V2YYNuf6VzS50tyzQ6AuNdc:uYEPx600yMKNfRll/mx6E5DCdSLVNdwN","tlshash":"4db281a623002a3604fe17e7f5daabc47671109ffe0944155878cc6e19a8fd352f1afa","size":24658,"data":"","first_seen":"2025-04-15T12:46:58.943377Z","last_seen":"2026-07-24T02:56:01.622666Z","times_seen":1856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3688fd64c409264431201fa55a828e81","sha1":"2b7eeefaa1edf3a7621f7576b35b01c895ef5367","sha256":"944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6","sha512":"1393fe2f189899d68717be994820d19a7e89660ea5cd90cf4a2d3dd07b41c95c2f63a3a0833d2407f16be6a3eae698ab549eac52d4ffc82bcd2da0e4e46da210","ssdeep":"","tlshash":"bae026faea5a457101e6a1237bce739e293665a3a92a4c402899ce806838dd31126ed1","size":333,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-07-24T07:56:43.55273Z","times_seen":39255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dafa7fe14b33c26fef9b0e5ba0c8e72","sha1":"62f67cdac55d89c43570bf0c338f4edf548b14e1","sha256":"50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61","sha512":"e202eb603564eb1e7d6fe4e0cf43592919441372b9d58e4c29db215b4d2e119c4d30c7a136e5a5e1866463865cf5cefcb90ed2e3aef46be422e91f964f758928","ssdeep":"384:W5evzW+ZTbXUH3o//bEPhXgA/k1efAJmpr:WC6UXUH3o//YpXgAJfACr","tlshash":"7d82f99bb33a4e9f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19264,"data":"","first_seen":"2025-04-03T04:02:09.307185Z","last_seen":"2026-07-24T01:52:52.992407Z","times_seen":41205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phantomwallet-t.us/","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-30T17:51:40.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://phantomwallet-t.us/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://phantomwallet-t.us/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://phantomwallet-t.us/\u003e; rel=shortlink\r\ncache-control: max-age=0\r\nexpires: Mon, 30 Jun 2025 17:51:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 21896\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 30 Jun 2025 17:51:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119022,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54600)","md5":"33cda38add61f3345ce348c16000fb1c","sha1":"212e9968fdd5bfdc1a4223a33659af913de4cafb","sha256":"19daa664b3964fde5f4d7151c27d9b25af9f6c3a9d7a2499406602bbc7a7ff26","sha512":"5d48fd01098a773d521f2ec93af9c6cbece70dbf2d1dce9e16146e77e8b2a76fb34c2571f6f5edc4aa6974e78900770e0e9cd2daca5edf556d3b38ce079efb86","ssdeep":"1536:APTCaUVuHhJiaap6B+RT+ORJKExyCy+yxim:APp09gBp2gBim","tlshash":"b1c3e8a2e3a01a76227b437de897f65876199523d64e63e5f4bdc09c41c8be310f270e","first_seen":"2025-06-30T17:52:04.280615Z","last_seen":"2025-06-30T17:52:04.280615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2274,"timings":{"blocked":496,"dns":89,"connect":135,"send":0,"wait":1281,"receive":1,"ssl":267},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.0","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.0 HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 May 2025 15:50:34 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 8490\r\ncontent-type: text/css\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45739,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43557)","md5":"7aa9be2b6bc3772350fa1059d461af6b","sha1":"25b94188cde43738f3a0e658b22401a534e5be48","sha256":"44622e9d59e3d2c9c4ffb9fc53d368e250f382ab07a3df978410eaa86556cff9","sha512":"8d47800211a8f5f6f563b4cbb3e07d41eb6041caf2763b8e51e203b732cfae06e25485b6483004ed8cf06807ba18ac84230899cdb58dd9f052eddcbd88f29de7","ssdeep":"768:mR7Ork1rhDYollnk+FHkqYCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:mVVY+tHQtBU5PTwDuaP","tlshash":"5623e86057d035391233873efad6bd082a694313d74f26e2f8ab8668c9c57c71a72a4c","first_seen":"2025-03-07T03:37:02.022924Z","last_seen":"2026-07-24T02:56:01.5797Z","times_seen":3009,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/uploads/2025/05/List2-1024x408.png","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/List2-1024x408.png HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 May 2025 15:55:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185930\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\ncontent-type: image/png\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":185930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 408, 8-bit/color RGBA, non-interlaced","md5":"ede6bae9394380d493b781ecc2f2a3c9","sha1":"81b03e00532775769ed42d21ac4c35d4022654ac","sha256":"9b0f2975b798f5545278a297fe4588e6c44532a8b767029e93ffb9f5f89ad61f","sha512":"245c06a3f132c49337b815b7e2ae78686d62c537efef3c323516c09d408c9aa4c5e455006298d98befc21603868cab09d787426d53ed0b53ca1e65e399411899","ssdeep":"3072:etVmg5BpR0coWcjhHn4IcNs7WecYDtwspIV0tPwxl1FeWng+xdKW8WvM:e2g59RoWQhHTHLB+0t4xl1FBg+SWk","tlshash":"460413eff917d74a0244b59981ac5820db406d019bb1cdf1566add8fcda282ccbb22e7","first_seen":"2025-06-30T17:52:04.282426Z","last_seen":"2025-06-30T17:52:04.282426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/uploads/2025/05/phntm-hero-3-1024x576.png","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/phntm-hero-3-1024x576.png HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 May 2025 15:56:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53078\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\ncontent-type: image/png\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGBA, non-interlaced","md5":"b089340ebb0995f1c295d703c4285e9b","sha1":"b5bf9a4e7cadf2c000e0a569b158f6214b2bd3bf","sha256":"4bdb7989decdee0678560f2d9bc159fe0011a25a67d51e3e50b286bf509a0343","sha512":"90da0faef1e4a805fbe3094e7d5a71616a01148d2eb75a26def0163c2ce11c288cf40f28885a9ecc1342b8fbc4b851480490e9e1147637a3e71cd2db6811e4ae","ssdeep":"1536:Q5EA6Snl8/weK+71Q0Ujet4NPoybkEc1VVmlQa:QWA6SCoeLMjq4Zw0","tlshash":"f333e0ddd197446ef8a9033266ab0f4a7b631858166f7a060ffbb1743a43bfc9d24811","first_seen":"2025-06-30T17:52:04.283343Z","last_seen":"2025-06-30T17:52:04.283343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":423,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.0","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.0 HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 May 2025 15:50:35 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 5613\r\ncontent-type: text/javascript\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24658,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24658), with no line terminators","md5":"ae769a2b59df43b99eacb70df55fb811","sha1":"0087a940209ac6e75a5ae7060cb13008b5218d08","sha256":"e1d8d99d3074de7fc8747888add39735ddbe463a6f8f31b66e16193886f2afb5","sha512":"de67274ec9ea13f63c882107b8901bce09c96f270e4422a78e62dbae3765fabc7c04286249c56982f897ab0bde7b42a590cd16a0ab49d1cea46fe0d466c7018d","ssdeep":"768:uYEPx60boEcFDTHjGQoDo3oEK2AfR0cLltNmx6Eq2V2YYNuf6VzS50tyzQ6AuNdc:uYEPx600yMKNfRll/mx6E5DCdSLVNdwN","tlshash":"4db281a623002a3604fe17e7f5daabc47671109ffe0944155878cc6e19a8fd352f1afa","first_seen":"2025-04-15T12:46:58.943377Z","last_seen":"2026-07-24T02:56:01.622666Z","times_seen":1856,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.1 HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 25 Mar 2025 19:48:38 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 14200\r\ncontent-type: text/css\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"dfe67cbbac3da53fdbbaed71c91db428","sha1":"8c82643ef63a8389c1b800b7c5d0af9d684b8b24","sha256":"597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9","sha512":"31f194ac37dc93680b60746a2a8cd67eb84af9ed74e270159ea37801c092ec9ee9217251865569fb5346a4b236aab6ca0999dd12a2fc8bcd0370013e1e764481","ssdeep":"3072:UeeJu1iQg5MG7x+qehvP0x2pck2qCA3Pu:T1iQg5MG7x+qehvP0x2pck2VA2","tlshash":"9ab3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-04-15T18:59:45.869691Z","last_seen":"2026-07-24T08:13:21.484138Z","times_seen":32704,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/uploads/2025/05/Link-%E2%86%92-SVG-scaled-200x39.png","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Link-%E2%86%92-SVG-scaled-200x39.png HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 30 May 2025 06:43:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3663\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\ncontent-type: image/png\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 39, 8-bit/color RGBA, non-interlaced","md5":"f5dd1e2db75c79b970c085828e94340c","sha1":"ca6623206a55e116d3b5bf05e83c6be225140abe","sha256":"9f0a4344f54b4f8f17b0f60daa740d9294a0b0f2cbd993ab67361e9f61f0c1b5","sha512":"7cf74466e631e4532d4405cf7eb369957de4815f6f7976610ac806f0847c5ecddb90ac0b31e113baafa950d51121523c8c37db7e018e7ce26f32167b89fa60a8","ssdeep":"","tlshash":"82719ea95451d406c9ab801eff40e0961dff45c4f5935faa38ba948930ada1ccb453c0","first_seen":"2025-06-30T17:52:04.285168Z","last_seen":"2025-06-30T17:52:04.285168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-content/uploads/2025/05/with-btm-1024x576.png","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:42.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/with-btm-1024x576.png HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 May 2025 15:55:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63129\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:42 GMT\r\ncontent-type: image/png\r\ndate: Mon, 30 Jun 2025 17:51:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGBA, non-interlaced","md5":"bc9b61d143dacc3bd68f29864516aea0","sha1":"1a3b91f8b7be59cbeeaed5bc5ab647d8b151380a","sha256":"27fb70d5abc967e26f78b25627c426f97a6c344bf377de48254f2bde1b792854","sha512":"121e86dfe627bb3fc743aa5bf4386a036840ecfc770abab5d5788aa0a4f796c06e09381cd30d7267b78415c6474029280b488adf63343b31b7d6e05fc1ae78d2","ssdeep":"1536:TJGi74pzQWJSrBd3wPJPk8JlLNx4ciFJ+Dxde:TJX2zqFwPxJdn9de","tlshash":"b953f2cb9a14d386c9cb863da5ebcb752b2b46f1dac762081f985ffc5412d464d0ac0b","first_seen":"2025-06-30T17:52:04.285849Z","last_seen":"2025-06-30T17:52:04.285849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:43.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.1 HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Mar 2025 10:01:26 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 4760\r\ncontent-type: text/javascript\r\ndate: Mon, 30 Jun 2025 17:51:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16290)","md5":"1dafa7fe14b33c26fef9b0e5ba0c8e72","sha1":"62f67cdac55d89c43570bf0c338f4edf548b14e1","sha256":"50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61","sha512":"e202eb603564eb1e7d6fe4e0cf43592919441372b9d58e4c29db215b4d2e119c4d30c7a136e5a5e1866463865cf5cefcb90ed2e3aef46be422e91f964f758928","ssdeep":"384:W5evzW+ZTbXUH3o//bEPhXgA/k1efAJmpr:WC6UXUH3o//YpXgAJfACr","tlshash":"7d82f99bb33a4e9f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-04-03T04:02:09.307185Z","last_seen":"2026-07-24T01:52:52.992407Z","times_seen":41205,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/favicon.ico","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:43.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-t.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://phantomwallet-t.us/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://phantomwallet-t.us/wp-includes/images/w-logo-blue-white-bg.png\r\ncache-control: max-age=0\r\nexpires: Mon, 30 Jun 2025 17:51:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 1\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 30 Jun 2025 17:51:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T08:51:02.377012Z","times_seen":17497665,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-t.us/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"phantomwallet-t.us","domain":"phantomwallet-t.us","tld":"us"},"ip":{"addr":"23.254.243.49","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://phantomwallet-t.us/","date":"2025-06-30T17:51:44.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ex-dous.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 May 2025 13:05:28 GMT","end":"Sun, 03 Aug 2025 13:05:27 GMT"},"fingerprint":{"sha1":"BC:D6:F4:DF:B1:8A:89:DE:15:B7:B9:99:97:7E:E3:44:79:31:A4:1B","sha256":"E5:A1:EB:2B:C0:45:F2:59:80:75:15:DE:7A:BF:27:94:D5:EE:AA:86:33:4B:03:79:C6:97:CE:5E:1E:A8:DF:1F"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: phantomwallet-t.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phantomwallet-t.us/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 16 Nov 2021 08:04:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4119\r\ncache-control: public\r\nexpires: Tue, 30 Jun 2026 17:51:44 GMT\r\ncontent-type: image/png\r\ndate: Mon, 30 Jun 2025 17:51:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-07-24T09:05:30.137878Z","times_seen":71739,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-30","alert":"Sinkholed","trigger":"phantomwallet-t.us","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}