{"report_id":"3c23c133-4cd1-4e99-94b2-705670a920ad","version":0,"status":"done","tags":[],"date":"2026-09-08T18:52:47Z","url":{"schema":"http","addr":"phanextension.app/","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"phanextension.app/","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"title":"Nova Wallet | Get Started","dom":{"size":4265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4265), with no line terminators","md5":"03533602051e924a368c033e0b4ba620","sha1":"7d5f72ed45fdce8fec9b97e62954d2b0418cc60d","sha256":"705ba1cb3afeef27070a285fe4ecf5e52d0092b2c448d7c1aa337f7071bb9883","sha512":"96f786fc0f460269f9eb42b1bddbc2e8c89cec4802820b8f5f54b07c987f535b713cdd12b6f867978a6c9e9a27467cc4d4bef90a4a8f638fb91ee259c36b0e90","ssdeep":"48:nGiNLNntFc/KmecshFMATNaN0drlytKytzDecTe3E84xbA9gg+YqznM3bAf/aYqz:nGezvXmEaphyH3z4pA9gBY7bk/aYS8HW","tlshash":"0f91a7252710cb1f132786aae882b0d9d685f60ec965cab5f5f042bb11e2ff1c963536","dom_hash":"domhash57e754c0a30977a3e0da90909564f45e","first_seen":"2026-09-08T18:34:14.657517Z","last_seen":"2026-09-08T18:52:50.277415Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phanextension.app/","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T18:52:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"phanextension.app","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-08T18:34:09.817937Z","last_seen":"2026-09-08T18:34:09.817937Z","alert_count":0,"request_count":12,"received_data":721707,"sent_data":9421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":2,"received_data":98688,"sent_data":1152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hgeildcrllfcpvinojeq.supabase.co","ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-08T18:34:09.816797Z","last_seen":"2026-09-08T18:34:09.816797Z","alert_count":0,"request_count":1,"received_data":925,"sent_data":625,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phanextension.app/assets/useRouter-Dpb7RwMI.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd64332765168170fe47df43c1ed7cd","sha1":"38058e599b7e8bfb12b397cc4c893be0abd289ec","sha256":"a7b2e027e4ee8ef171e23e29c512ec8f4baf4b26bfe0cc63af7cb73ffc73768b","sha512":"023fef4fa351743602c780e9e101e451a426ed29a3e63c6aee5a06288d209ca5266bc506646d496680f64ed83dfb3002e26733847d5df36491bf1e28a06b4301","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI2:XDlLy1fIlAclrIX1EwlI2","tlshash":"e502c5c974d5b1a1169375b2807f50aaf33e2899284ca470b222d9f57df484cc927f9f","size":8516,"data":"","first_seen":"2026-08-08T19:20:42.161508Z","last_seen":"2026-09-08T19:52:42.682854Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/button-CGTF-v8X.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebbc513481226f45462e75dafbc02a0f","sha1":"2d6f2385f68a1afad9539114c299474cd94027e0","sha256":"f7633d9c02256dc26fc3300ffe83e5ee22581000b2d98a7792b3b6bcd9544add","sha512":"27e4a2ccfdd610f9acf18295d37713b6426efc891e9be93df9e99116a6f1289ab374bbfba45a9d3111477b731ecc6f9957e925aecd2268734a29b4235b5326f5","ssdeep":"384:IPkKV8VDfDHtQeFboGbzeDqECNkUFbR4iti/7tOUhh8TJJSYKjyL:q8VHaKosz/NFbRygw8CYKjyL","tlshash":"45e20a637153297a26ffc157d15cea8de6326702c60e8b08f2420b319778bf59696f0e","size":32163,"data":"","first_seen":"2026-09-08T18:34:14.661002Z","last_seen":"2026-09-08T18:52:50.279132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/routes-Byp5ssE-.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"640c6bc7d8ab4d920adb24eb45f3781d","sha1":"07c4f2d1005133f077623049ce5baeb2691197bf","sha256":"1ca93428aeb07f17d57fd7bf1172e93f0b76fb777f0f9c06f56eb724bb3cc955","sha512":"60783e460fe7808136c63909869cb40c8712007251172d0782411f101f90e4a0c0f3ccc8387dde7d05e6241a869f04ae2e18f8d7e2afb5f2ec8be089b0ca322a","ssdeep":"96:IPAneeFx6Fl+DwfalVuPoA9A4oHplqYuZprK1Qmcjm3C9m5DP31A9qszZad:IPKvyl+sfue44oadPK0dM3ae","tlshash":"4ee1970df2a66ebdb22f4498700ee09d761ee318dd178969f5f8602a17415c1bf2bbc4","size":6967,"data":"","first_seen":"2026-09-08T18:34:14.659647Z","last_seen":"2026-09-08T18:52:50.284137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/index-2nTtMnzB.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aad6a379c01bb6d5391ec4339b2fcc3","sha1":"2fcdecd12d76e00ae37c00f8a2e4f7fc3cc514b0","sha256":"6e7500b90eacbdacd6f76d42277cdd02be49e479c840828116c0c787e50bb523","sha512":"6ccb0b809569f5aca58f067e11eaf71ea63e27502bcf8374971a5868d37804e7bab5911d76fd284f5e4eb97a9f0c2ba89be519f22308256fe7aa0677375d1db7","ssdeep":"6144:ZPOY/GSZA55591OU/VxYO5AV9g2wljdym7LE1jDU5bbTLHjXsuYLjKTXp8qgEURr:lwn/VcV9ltUX2jqXa5i7a/uW","tlshash":"ecc46ee833a2b4234bd651b2407b1502f33914566c0d4428f678eddf7ab5849e6bbfb8","size":552947,"data":"","first_seen":"2026-09-08T18:34:14.67197Z","last_seen":"2026-09-08T18:52:50.286559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/~flock.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-08T21:12:12.178412Z","times_seen":16688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/site-texts-BCvRTn7E.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ae644506da998131ee66f9ac6c66a13","sha1":"2ee422c96f91cfc7fc3100e923226cde0e201003","sha256":"82f5ca0e7a8e856a5ab9ad956d36124cf16fe6329ac2adee21b4a5251f7d5637","sha512":"beb46d62ab14d7e252f82437c0d51adc9cb7353857ca34b27195bdac7765d43ec7b8460d5731aca6174e5cf5b5bfc6e2d0fa45ecaa4bd49d245b8eeb81e1d72e","ssdeep":"","tlshash":"c93124962a856b7dd16b0103f17a34525da0ce99fbd8f8c1b4df0d934340862927ef56","size":1445,"data":"","first_seen":"2026-09-08T18:34:14.66409Z","last_seen":"2026-09-08T18:52:50.28251Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phanextension.app/assets/useRouter-Dpb7RwMI.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.970Z","timestamp":1788893537970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/useRouter-Dpb7RwMI.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a0c5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8516,"size_decoded":3762,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8516), with no line terminators","md5":"4bd64332765168170fe47df43c1ed7cd","sha1":"38058e599b7e8bfb12b397cc4c893be0abd289ec","sha256":"a7b2e027e4ee8ef171e23e29c512ec8f4baf4b26bfe0cc63af7cb73ffc73768b","sha512":"023fef4fa351743602c780e9e101e451a426ed29a3e63c6aee5a06288d209ca5266bc506646d496680f64ed83dfb3002e26733847d5df36491bf1e28a06b4301","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlI2:XDlLy1fIlAclrIX1EwlI2","tlshash":"e502c5c974d5b1a1169375b2807f50aaf33e2899284ca470b222d9f57df484cc927f9f","first_seen":"2026-08-08T19:20:42.161508Z","last_seen":"2026-09-08T19:52:42.682854Z","times_seen":11,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/button-CGTF-v8X.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.973Z","timestamp":1788893537973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/button-CGTF-v8X.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a115691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32163,"size_decoded":10960,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32163), with no line terminators","md5":"ebbc513481226f45462e75dafbc02a0f","sha1":"2d6f2385f68a1afad9539114c299474cd94027e0","sha256":"f7633d9c02256dc26fc3300ffe83e5ee22581000b2d98a7792b3b6bcd9544add","sha512":"27e4a2ccfdd610f9acf18295d37713b6426efc891e9be93df9e99116a6f1289ab374bbfba45a9d3111477b731ecc6f9957e925aecd2268734a29b4235b5326f5","ssdeep":"384:IPkKV8VDfDHtQeFboGbzeDqECNkUFbR4iti/7tOUhh8TJJSYKjyL:q8VHaKosz/NFbRygw8CYKjyL","tlshash":"45e20a637153297a26ffc157d15cea8de6326702c60e8b08f2420b319778bf59696f0e","first_seen":"2026-09-08T18:34:14.661002Z","last_seen":"2026-09-08T18:52:50.279132Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:18.187Z","timestamp":1788893538187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://phanextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 03:45:35 GMT\r\nexpires: Wed, 08 Sep 2027 03:45:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 54403\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T23:44:12.884173Z","times_seen":279216,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/favicon.png","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:18.324Z","timestamp":1788893538324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1665\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\nserver: cloudflare\r\ncf-ray: a38026468cba5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1665,"size_decoded":2118,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"ec56e08bb30f2b7792a486a57fb4faea","sha1":"8c3ffd2a4faee43ceb11fcc219bf43de59271d13","sha256":"13292286eedd75428e3250a82502692add0dbf712ff40229c37ea4934bb8372e","sha512":"220d27c5fc1a738ef94c5d589b3f873b56fa52f0883bae5828885efff1a1b78855551991b535641d2c9d77e285900db0333ad4a557823e867abc63da00030ccc","ssdeep":"","tlshash":"a331fac793504d04a795122a73da5216ee17e0d41685cf21b211cbde01d8f9e24af181","first_seen":"2026-09-08T18:34:14.665861Z","last_seen":"2026-09-08T18:52:50.280657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/styles-DMsSsXcU.css","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.965Z","timestamp":1788893537965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/styles-DMsSsXcU.css HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026444a015691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76271,"size_decoded":13455,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"adda2a394621b6c43ca13bded11a7c16","sha1":"b568b720d01268bc746fb7e6acdecb4ceb18b789","sha256":"32de0e6214b126177dd708ceae7efd23ec795cae1c276d3984fe2bd459395e34","sha512":"97ee3465c6bec296442d2b735cc261cd4ed9c5a03564f0869370904df9b0dde5e21117f75feb2cc4640d142853b9a6c3f151fd46f1dec891f4e763140f32cc8c","ssdeep":"1536:nTpYvCh+imwP1/+IyGXDwDv6fJfU6WaNSsMq+WDhXX78T4Xpk988R988q:TpYvCh+imwP1WIyawDv6fpU6NMq+WDhP","tlshash":"ca730790b229d53f7c33a4f5938cb89c911ab0c0dd7506e9fb56612256c3bf2adab314","first_seen":"2026-09-08T18:34:14.678363Z","last_seen":"2026-09-08T18:52:50.281264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/site-texts-BCvRTn7E.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.974Z","timestamp":1788893537974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/site-texts-BCvRTn7E.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a165691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":1222,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1421), with no line terminators","md5":"3ae644506da998131ee66f9ac6c66a13","sha1":"2ee422c96f91cfc7fc3100e923226cde0e201003","sha256":"82f5ca0e7a8e856a5ab9ad956d36124cf16fe6329ac2adee21b4a5251f7d5637","sha512":"beb46d62ab14d7e252f82437c0d51adc9cb7353857ca34b27195bdac7765d43ec7b8460d5731aca6174e5cf5b5bfc6e2d0fa45ecaa4bd49d245b8eeb81e1d72e","ssdeep":"","tlshash":"c93124962a856b7dd16b0103f17a34525da0ce99fbd8f8c1b4df0d934340862927ef56","first_seen":"2026-09-08T18:34:14.66409Z","last_seen":"2026-09-08T18:52:50.28251Z","times_seen":2,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/__l5e/assets-v1/2d2cd9df-0249-40c9-ab4c-da5c048fa941/logo-nova.png","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.980Z","timestamp":1788893537980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /__l5e/assets-v1/2d2cd9df-0249-40c9-ab4c-da5c048fa941/logo-nova.png HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1033\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"fbb52f87816a4993b60b28f298d9cd75\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a38026446a2c5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1033,"size_decoded":1597,"mime_type":"image/png","magic":"PNG image data, 304 x 216, 4-bit colormap, non-interlaced","md5":"fbb52f87816a4993b60b28f298d9cd75","sha1":"eccfbec71d7811fced0ee94af53f34649574a86b","sha256":"5b842909785bec731b24e7900462034ab9796d2ba380c9970673e9bd909f0d74","sha512":"00a4dec0b271793f5dbbbb2470cea487db322648a96d66c08de9a4cd5a653f916e120b6f0ea505eb192d6fc7ee30a72ee764f78c947079bdcd9e85a092279de8","ssdeep":"","tlshash":"4911a88f2f810617e9faa00e17e0776d924503d819677002db9d977c9599374709553d","first_seen":"2026-03-22T20:01:43.486164Z","last_seen":"2026-09-08T18:52:50.283071Z","times_seen":20,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/routes-Byp5ssE-.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.972Z","timestamp":1788893537972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/routes-Byp5ssE-.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a0f5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6967,"size_decoded":3062,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (6965), with no line terminators","md5":"640c6bc7d8ab4d920adb24eb45f3781d","sha1":"07c4f2d1005133f077623049ce5baeb2691197bf","sha256":"1ca93428aeb07f17d57fd7bf1172e93f0b76fb777f0f9c06f56eb724bb3cc955","sha512":"60783e460fe7808136c63909869cb40c8712007251172d0782411f101f90e4a0c0f3ccc8387dde7d05e6241a869f04ae2e18f8d7e2afb5f2ec8be089b0ca322a","ssdeep":"96:IPAneeFx6Fl+DwfalVuPoA9A4oHplqYuZprK1Qmcjm3C9m5DP31A9qszZad:IPKvyl+sfue44oadPK0dM3ae","tlshash":"4ee1970df2a66ebdb22f4498700ee09d761ee318dd178969f5f8602a17415c1bf2bbc4","first_seen":"2026-09-08T18:34:14.659647Z","last_seen":"2026-09-08T18:52:50.284137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/~flock.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.975Z","timestamp":1788893537975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a1b5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-08T21:12:12.178412Z","times_seen":16688,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.967Z","timestamp":1788893537967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 18:52:18 GMT\r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-09-08T18:52:50.285972Z","times_seen":9388,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":24,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/assets/index-2nTtMnzB.js","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.969Z","timestamp":1788893537969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /assets/index-2nTtMnzB.js HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498338.Jt06w1H9U6M4d42cfFXaOjKtPR7b5yhvBEOLWfFOCQs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a38026445a085691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552947,"size_decoded":160212,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (51750)","md5":"6aad6a379c01bb6d5391ec4339b2fcc3","sha1":"2fcdecd12d76e00ae37c00f8a2e4f7fc3cc514b0","sha256":"6e7500b90eacbdacd6f76d42277cdd02be49e479c840828116c0c787e50bb523","sha512":"6ccb0b809569f5aca58f067e11eaf71ea63e27502bcf8374971a5868d37804e7bab5911d76fd284f5e4eb97a9f0c2ba89be519f22308256fe7aa0677375d1db7","ssdeep":"6144:ZPOY/GSZA55591OU/VxYO5AV9g2wljdym7LE1jDU5bbTLHjXsuYLjKTXp8qgEURr:lwn/VcV9ltUX2jqXa5i7a/uW","tlshash":"ecc46ee833a2b4234bd651b2407b1502f33914566c0d4428f678eddf7ab5849e6bbfb8","first_seen":"2026-09-08T18:34:14.67197Z","last_seen":"2026-09-08T18:52:50.286559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/__l5e/assets-v1/b9f2738e-d146-48b1-a60a-b8cfaf291154/phantom-logo.png","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:17.982Z","timestamp":1788893537982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET /__l5e/assets-v1/b9f2738e-d146-48b1-a60a-b8cfaf291154/phantom-logo.png HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 7321\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0003a8013c8190fa2b4f1c6d1bb6419c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a38026446a315691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7321,"size_decoded":7885,"mime_type":"image/png","magic":"PNG image data, 432 x 87, 8-bit/color RGBA, non-interlaced","md5":"0003a8013c8190fa2b4f1c6d1bb6419c","sha1":"41ddee5a1e0bf740f8dd4a9d9bb85bbd175a278f","sha256":"d6e46b080f497b61fc54f5c88cea6bdc303ea321cbffe3ff0e09b5287190649a","sha512":"8fd07f9f0f08364ab7efde2483e31281b70031ecead570199848dd1956cc622a22f446d243a87e1833c8985c8e85e031705f17335f6b133b63da335b278cf3bb","ssdeep":"192:Wcxvi6R+lgPT2RHqp4f8HqaZ2i1+xf1w3eA:WcVj+lgPTIXEHqa3+bwOA","tlshash":"82e1b1770206d73c4e78b0a52ee71d0b75791ec22562be386e221170abe090275dcbf5","first_seen":"2026-09-08T18:34:14.675782Z","last_seen":"2026-09-08T18:52:50.28766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:18.186Z","timestamp":1788893538186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://phanextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 03:45:35 GMT\r\nexpires: Wed, 08 Sep 2027 03:45:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 54403\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T23:44:12.884173Z","times_seen":279216,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeildcrllfcpvinojeq.supabase.co/rest/v1/site_texts?select=key%2Cvalue","fqdn":"hgeildcrllfcpvinojeq.supabase.co","domain":"hgeildcrllfcpvinojeq.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:18.435Z","timestamp":1788893538435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:15:48 GMT","end":"Tue, 24 Nov 2026 12:15:45 GMT"},"fingerprint":{"sha1":"21:19:3F:D4:6D:84:3E:3B:9B:C6:33:96:42:7C:FA:C3:9B:76:41:B8","sha256":"BE:17:BF:33:61:A7:69:1B:DD:E2:93:D9:23:03:CA:35:98:E6:C0:D1:42:6F:8F:B9:2E:43:8A:19:DA:F8:E3:1B"}}},"request":{"raw":"OPTIONS /rest/v1/site_texts?select=key%2Cvalue HTTP/1.1\r\nHost: hgeildcrllfcpvinojeq.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,x-client-info\r\nReferer: https://phanextension.app/\r\nOrigin: https://phanextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:21 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: hgeildcrllfcpvinojeq\r\nsb-request-id: 01a0825d-34f8-7e65-8b27-88dbbcc5746c\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=pUtBiZ31Yl2TIa79GQBraYNehl..Ihb8ommIV1UCja0-1788893541.6084628-1.0.1.1-zpbny6aA_41Lei_fZ3dVd.OYgqsyFDODyOb7WNmVBUjxb3U.Wdku64406DD0cN2Xxa9tLqKSvKl2o8q3fkivBvNgxO_0wqLjXK6FrwD4GFZVEIhbzZ26l02lYGEBE0_r; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Tue, 08 Sep 2026 19:22:21 GMT\r\nserver: cloudflare\r\ncf-ray: a380265b0fca56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pUtBiZ31Yl2TIa79GQBraYNehl..Ihb8ommIV1UCja0-1788893541.6084628-1.0.1.1-zpbny6aA_41Lei_fZ3dVd.OYgqsyFDODyOb7WNmVBUjxb3U.Wdku64406DD0cN2Xxa9tLqKSvKl2o8q3fkivBvNgxO_0wqLjXK6FrwD4GFZVEIhbzZ26l02lYGEBE0_r","quoted":false,"path":"/","domain":"supabase.co","expires":"2026-09-08T19:22:21Z","raw_expires":"Tue, 08 Sep 2026 19:22:21 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pUtBiZ31Yl2TIa79GQBraYNehl..Ihb8ommIV1UCja0-1788893541.6084628-1.0.1.1-zpbny6aA_41Lei_fZ3dVd.OYgqsyFDODyOb7WNmVBUjxb3U.Wdku64406DD0cN2Xxa9tLqKSvKl2o8q3fkivBvNgxO_0wqLjXK6FrwD4GFZVEIhbzZ26l02lYGEBE0_r; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Tue, 08 Sep 2026 19:22:21 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":925,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":3244,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":75,"receive":0,"ssl":3163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/~api/analytics","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phanextension.app/","date":"2026-09-08T18:52:18.480Z","timestamp":1788893538480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phanextension.app/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://phanextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; __cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y; session-id=081ffdf0-85a3-4e97-8460-e2c1493ca553\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":338,"data":"{\"timestamp\":\"2026-09-08T18:52:18.478Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"081ffdf0-85a3-4e97-8460-e2c1493ca553\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://phanextension.app/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 08 Sep 2026 18:52:18 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a38026478def5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-09-08T23:48:29.007939Z","times_seen":6442,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phanextension.app/","fqdn":"phanextension.app","domain":"phanextension.app","tld":"app"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T18:52:16.707Z","timestamp":1788893536707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phanextension.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 15:37:27 GMT","end":"Sun, 06 Dec 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CC:6E:FA:AB:60:09:E6:2F:D3:06:4B:BF:0E:4F:D7:4B:DF:65:CB:2F","sha256":"98:6C:21:01:3A:A4:EB:B7:AC:47:5B:BE:2E:7B:55:6D:B1:83:08:59:6B:46:6D:D2:2E:A2:13:16:D8:63:5A:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phanextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 08 Sep 2026 18:52:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y; HttpOnly; SameSite=None; Secure; Path=/; Domain=phanextension.app; Expires=Tue, 08 Sep 2026 19:22:17 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a380263cc9035691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.04cb1b7c-f7ce-4b4c-8025-04a96e1a77ae.1789498337.Yq2vry1c6uDvnNpf8A5pg7Z03X2rZyHPNaxRHV2lzHo; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y","quoted":false,"path":"/","domain":"phanextension.app","expires":"2026-09-08T19:22:17Z","raw_expires":"Tue, 08 Sep 2026 19:22:17 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=e6zYIPky7epiHTR86Eey6aTG3R4WMh6u.ByXwI_7zRw-1788893536.7650213-1.0.1.1-7.Sg.fFcV3hEpjHFlvDmuX89.BrBR6txnhmkK.4CHTafKUZ6s1wxIYXf2k6DLRN3w2oO6a2MPMm1EHMEKPxvMuI9KeEy4lVV8LmoCjcdDmn94j3M4XyIT1us8fR2Mq5y; HttpOnly; SameSite=None; Secure; Path=/; Domain=phanextension.app; Expires=Tue, 08 Sep 2026 19:22:17 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5792,"size_decoded":3266,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"8d3d3bb9166760a851960a16dc7e617a","sha1":"116b7a2bde96f40e2fa9727f8d15e8daf5c2f15b","sha256":"4d3282e104b2280cc171c2db79fc67b4207234cf4b14bb7ba7a15b66c5288d32","sha512":"f16278b3b9073fcbc58a84157efa22d07127a916f2567b1a0fc450a3a8fd61dd2ff69352c45a4ae1e995b01b52d7f17756066091607a21f95168707d821c44da","ssdeep":"96:TmE8LwYr9yfmVlFL9O0aphTH3zfA9gBY7bkEaYS8H9qdZTMS4IReTmL:wZOj3zY8Y79aYPqMS4eek","tlshash":"a4c1fb622600c62b137b55f7a451b0899785f106e556c5bcf5f440bf25d2ff3c823531","first_seen":"2026-09-08T18:52:50.290126Z","last_seen":"2026-09-08T18:52:50.290126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":0,"dns":30,"connect":1,"send":0,"wait":814,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}