{"report_id":"5e17e489-14af-4571-9776-ee24dc4cc98f","version":6,"status":"done","tags":[],"date":"2026-02-07T13:07:57Z","url":{"schema":"http","addr":"mail.phantomwallet-s.us","fqdn":"mail.phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomwallet-s.us/","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"title":"Phantom Wallet - Download Your Phantom Wallet - Phantom","dom":{"size":115569,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17322)","md5":"3c2c043bc352aa9ac75afe84d0c77801","sha1":"dcd625dc527726d1a6609d046af12aa77abc5d95","sha256":"b925c65ada2f222f7b660a1c7064140b3f3d8be7cb145680c0447be275aa36f0","sha512":"becca8623657116325bd1c9bbedadd141e2a1366140d739d676610957cf9287963a6dd3235185a17aa531b8d8875adaeff6ec0ab223b5864496cdaf0bbe7295d","ssdeep":"3072:Dq10KZZd4riZobEemlUVugamZOgvC6MrJB:ofd42ZobEemlUVugam9c","tlshash":"c9b3b7a1e36488f63a5bc76a8849b31ce55af640ce8957e6f0f0d12455cc9fa14b3b0f","dom_hash":"domhash0e66acfd11a3bc44719d933c56d821b5","first_seen":"2026-02-07T12:53:12.369775Z","last_seen":"2026-02-07T13:07:59.604858Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.phantomwallet-s.us","fqdn":"mail.phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T13:07:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"mail.phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"mail.phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sanity-proxy-v2.phantom.app","ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-21","domain_rank":119374,"first_seen":"2023-08-04T20:40:01Z","last_seen":"2026-02-07T12:53:08.270848Z","alert_count":0,"request_count":3,"received_data":1677810,"sent_data":2276,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"mail.phantomwallet-s.us","ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-02-07T13:07:58.378653Z","last_seen":"2026-02-07T13:07:58.378653Z","alert_count":2,"request_count":1,"received_data":115545,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"phantomwallet-s.us","ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2025-11-29T10:26:19.743627Z","last_seen":"2025-11-29T10:26:19.743627Z","alert_count":30,"request_count":15,"received_data":649065,"sent_data":7394,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","size":2030,"data":"","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-07-26T18:42:30.123145Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/wp-emoji-loader.min.js","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a14093ed8a2eefd2968feb74caac0cd2","sha1":"9d2e0ad8d4a1db82d56a18af341417f01896557c","sha256":"6864fe24da58a00fe634cb1d601f72d6d2161a556cb8e53a72fd2684973434b8","sha512":"a11cd502888b8e799ea213971b7285b9c8bab4ab13ec71670b2fe096d02c3bc2ab6aff9c2fc83d7d19a7d5fda3e1f0b3c380a16a285de3beda55f81d2131b757","ssdeep":"","tlshash":"1971b69ae7763cdbb2f900f2697a0d47eb614435d6c8d038c9bda3141cb5893c274a46","size":3640,"data":"","first_seen":"2026-02-07T12:53:12.407229Z","last_seen":"2026-02-07T13:07:59.617902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-10T23:00:49.969402Z","times_seen":11703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-08-11T06:23:54.38583Z","times_seen":5865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T06:53:52.947159Z","times_seen":310855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-block-template-skip-link-js-after","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"13314a74ff62d4677967c3bcd9b72744","sha1":"8a110a62c91fb822b0174fa3ba7b431a0afdfcd3","sha256":"c5bb309e86dd30616f56ed8700d2e3722d41ae4007f2f437ff37553514f8753e","sha512":"d413a4e51024bb25af2932a344971c07504dd2294d791819f5254c7dbc878a4ebfb4a2c200b28739c56a568d7388cf0537b6cc624f2d0366907bd4972f3b8012","ssdeep":"","tlshash":"af3195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1715,"data":"","first_seen":"2025-12-21T08:03:40.865932Z","last_seen":"2026-06-09T09:01:58.425314Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/plugins/mojo-marketplace-wp-plugin//vendor/newfold-labs/wp-module-performance/build/image-lazy-loader.min.js?ver=1770391206","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b93603980a63fa3ae7437df4ae704b","sha1":"acc0b57dd5c306b97865ced217ce2e37fe0eda4d","sha256":"545528b658e08197f411846b240da9e5319ab8f655288ead2b41e2ca21d3cc16","sha512":"e94c8ad1416368aa39683ffe69e78ca29aeee6422aa57aa7249e69127a388b6c63772b1e4eeb7567839a36806a8ed38b0d9f16867b7d5af9976ac464aea49b38","ssdeep":"","tlshash":"2cf0a2e4d29991332d5a44e991e097a08960231d784e0dd462745c8b95cbe821afaabb","size":623,"data":"","first_seen":"2025-02-06T17:34:24.863033Z","last_seen":"2026-08-11T03:46:11.602205Z","times_seen":3843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/nfd-performance-lazy-loader-js-before","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e59db5e08cf6003ec117155740187ef4","sha1":"c16c49c60fb9e69edf93a6181530651f4cd5c0ba","sha256":"0d8aaeb3824ec43f77beeedf9b0d1d1beefa1606d71c9980179a75484822e4c1","sha512":"2be9b065a5c945427b9dc0a35a20863947f67cc3153a6f931fce12155566d9c7de826c53d492c0c53b3aa97682ced98a2b79ca76532c9e054015f85b19c4b515","ssdeep":"","tlshash":"f62189fef28114115d3b547cb65b2602a52a27bbc0804f26a5fee045571745772a120e","size":1130,"data":"","first_seen":"2025-12-26T05:38:45.327018Z","last_seen":"2026-04-17T09:17:37.477024Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 28 Oct 2025 06:56:48 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 1209\r\ncontent-type: text/javascript\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-10T23:00:49.969402Z","times_seen":11703,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"sanity-proxy-v2.phantom.app","tld":""},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:50:33 GMT","end":"Mon, 23 Mar 2026 14:50:31 GMT"},"fingerprint":{"sha1":"15:6C:B0:68:44:6D:1B:D7:EB:0C:20:32:ED:64:62:10:40:86:51:6A","sha256":"99:DD:5E:68:3E:57:B5:DD:AD:1B:7A:49:EB:3D:B9:29:48:15:70:C0:25:5A:AE:55:13:B9:69:02:69:46:FB:68"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 07 Feb 2026 13:07:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7208263\r\nserver: cloudflare\r\ncontent-range: bytes 0-7208262/7208263\r\ncf-ray: 9ca31c77ee83b509-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 259301\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\nset-cookie: __cf_bm=OXF7MRKSzOk5I5L3OZFg1zlWkwoBHi3d72D0htbYAvM-1770469656-1.0.1.1-vNVJuRxWdEKKGfE7E.EzBjteKopIf8QkUvUEACmtcKiK5gYRkW7ASJei.buWJeHnFpE4QzgITdTvTC52zix0hnN59l_Cn0cIW_XsT9vkr94; path=/; expires=Sat, 07-Feb-26 13:37:36 GMT; domain=.phantom.app; HttpOnly; Secure; SameSite=None\n_cfuvid=nICAX8_0PraI6pbTvAFniZO0kQlWjOZ2_6FPB4483w4-1770469656338-0.0.1.1-604800000; path=/; domain=.phantom.app; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"412a06b655f2ca21dd9e1b6b0fb129ce","sha1":"bd5eaec75c7fe9acd8340f7d37065a9a0af9dcd7","sha256":"cbe30b1b2bc9c19ee59db32ca685e515004bfae2dcbbb97c67de03a9f703df20","sha512":"4499d245c74a5e1787bf7945eca14e3ceb703a7d1d03b07781ab5c7b1fffef51774da49d3cafd1a8762221a99a91f43073f44d0a9766d503414af47a801d4d04","ssdeep":"24576:YDbr22M6Zs+5kDP00fh/EaZOKF3OrClGFDMmcQoskxQcg:e22M6ZZetEq+mAF4mcQolXg","tlshash":"9a2533978dbf1b66ddd026fc65b4210c22329093661213f3cba625ad10feca95f55dc3","first_seen":"2026-02-07T12:53:12.376276Z","last_seen":"2026-08-02T06:30:40.826828Z","times_seen":9,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":35,"dns":20,"connect":1,"send":0,"wait":40,"receive":70,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"sanity-proxy-v2.phantom.app","tld":""},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:50:33 GMT","end":"Mon, 23 Mar 2026 14:50:31 GMT"},"fingerprint":{"sha1":"15:6C:B0:68:44:6D:1B:D7:EB:0C:20:32:ED:64:62:10:40:86:51:6A","sha256":"99:DD:5E:68:3E:57:B5:DD:AD:1B:7A:49:EB:3D:B9:29:48:15:70:C0:25:5A:AE:55:13:B9:69:02:69:46:FB:68"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7176192-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nCookie: __cf_bm=OXF7MRKSzOk5I5L3OZFg1zlWkwoBHi3d72D0htbYAvM-1770469656-1.0.1.1-vNVJuRxWdEKKGfE7E.EzBjteKopIf8QkUvUEACmtcKiK5gYRkW7ASJei.buWJeHnFpE4QzgITdTvTC52zix0hnN59l_Cn0cIW_XsT9vkr94; _cfuvid=nICAX8_0PraI6pbTvAFniZO0kQlWjOZ2_6FPB4483w4-1770469656338-0.0.1.1-604800000\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 07 Feb 2026 13:07:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 32071\r\nserver: cloudflare\r\ncontent-range: bytes 7176192-7208262/7208263\r\ncf-ray: 9ca31c78ea7a0b06-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 259301\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32071,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"e49691a04c0f459a39ba70a8c6fdc371","sha1":"d4df30c0dd61a3e87fdbb62be57e23183b9f35e6","sha256":"75015706ddd5d1cf6a2d5638ab1ad396ac2b8843901d0aeb5f250cf4f108bdc5","sha512":"992642317bb1c0327b8d32c0eab0a65b87a4b010eba1040b9465821dcb55bb50680783cdaed2303f6d6a82c3eee25ca632cd57ee77d89a07b08b384829391bf7","ssdeep":"768:IyfPDWunJGu3BGFqHqHfgG8AfNpp0qYCZSsrVV:IyDBJAX/gFAf1lxpV","tlshash":"25e2bf96cbb6566bc96402381af3a3107338da2d7fbf071ba7a1d139fc257492d03648","first_seen":"2026-02-07T12:53:12.400418Z","last_seen":"2026-08-02T06:30:40.823387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/images/abstract-blocks.jpg","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/images/abstract-blocks.jpg HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 138929\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nx-newfold-cache-level: 2\r\ncontent-type: image/jpeg\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":138929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2025:04:08 11:24:35], baseline, precision 8, 1280x853, components 1","md5":"35c5150b9b9d4188895567837609b1b8","sha1":"e4b8ad3d150778327a27ad8a3f1a0f5bd98f8c33","sha256":"8498339ed1cb83c9d1c52b51c0923302645c9bd687f801851584c8d32bcb735c","sha512":"43156c076cb1c452f1e8b3d18852acd11a96ce3df24401672ece541b48e249cb335d724432e0cc5e638b028570d819a4fcc4ab0fe4fbbf44696dccb11e32cfd8","ssdeep":"3072:RMMN0Mzwv2u7n6vM7CDLF6N7/GArj7X3IEpFUtITpKEhXBHPqW:Rn0MzwuK6vM2DRY6ALYEXUtITtXBHPv","tlshash":"84d312033fc299d6c1860b7f8cd516e2f52ce2029d45fba41bd7e04e9ea6586af061f4","first_seen":"2025-07-28T22:31:59.386519Z","last_seen":"2026-07-26T18:42:30.125834Z","times_seen":40,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T13:07:35.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 13:07:35 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html; charset=UTF-8\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://phantomwallet-s.us/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://phantomwallet-s.us/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://phantomwallet-s.us/\u003e; rel=shortlink\r\ncache-control: max-age=7200\r\nexpires: Sat, 07 Feb 2026 15:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":114828,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17298)","md5":"214f9d52abc6ea007018ff9aee3d2685","sha1":"a9a3e64fbc7a659e72eb11060ea6ec0b5fdf0e10","sha256":"0774544cd8c3f8a6839a83d20798f805fd75524a61c55e83b4c42f2ce1d1dcd4","sha512":"6198cf2b414ca0dde718d7804d923046d3ba9cea381ec9c71728ef3ebf50904a5685d185cdcd86794e5addafc80a7915f301bccc1f93a2222b06de87f1af1db8","ssdeep":"3072:Zzj8bJrdry9Z+b+emlUVugaGQigvC6MrJl:wZdrwZ+b+emlUVugaGIc","tlshash":"f0b3b661e36488f63a5bc76a8859b31ce54af640ce8957e6f0f0d12454ccafa14b7b0f","first_seen":"2026-02-07T12:53:12.39466Z","last_seen":"2026-02-07T13:07:59.6084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 235\r\ncontent-type: text/css\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496), with no line terminators","md5":"ff772ecff2c1d287b5d32a690afbb831","sha1":"3892a8ead03d51a7b71a1b94b49dcdca190bcf8d","sha256":"0ce47fb70ee0869662c3850871303aee6322469d5aa74b1c5645836e81dba031","sha512":"ba10564ffbc052443520fe888df34152133ddeec67e4bad86dbe389c579e4b166c599ec0331690ff5c5d09265067734fa066da30ead93c4a22120f9203aeecf5","ssdeep":"","tlshash":"e2f0e2040fe889f831dbc23c986942e1a44c3021e5ab1bde822ce4a4621a74d08a7b17","first_seen":"2025-07-28T22:31:59.389001Z","last_seen":"2026-07-26T18:42:30.120961Z","times_seen":48,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/plugins/mojo-marketplace-wp-plugin//vendor/newfold-labs/wp-module-performance/build/image-lazy-loader.min.js?ver=1770391206","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/plugins/mojo-marketplace-wp-plugin//vendor/newfold-labs/wp-module-performance/build/image-lazy-loader.min.js?ver=1770391206 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:20:06 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 387\r\ncontent-type: text/javascript\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":623,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (623), with no line terminators","md5":"c3b93603980a63fa3ae7437df4ae704b","sha1":"acc0b57dd5c306b97865ced217ce2e37fe0eda4d","sha256":"545528b658e08197f411846b240da9e5319ab8f655288ead2b41e2ca21d3cc16","sha512":"e94c8ad1416368aa39683ffe69e78ca29aeee6422aa57aa7249e69127a388b6c63772b1e4eeb7567839a36806a8ed38b0d9f16867b7d5af9976ac464aea49b38","ssdeep":"","tlshash":"2cf0a2e4d29991332d5a44e991e097a08960231d784e0dd462745c8b95cbe821afaabb","first_seen":"2025-02-06T17:34:24.863033Z","last_seen":"2026-08-11T03:46:11.602205Z","times_seen":3843,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/blocks/navigation/style.min.css?ver=6.9.1","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 21 Oct 2025 01:44:02 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 3308\r\ncontent-type: text/css\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-08-11T06:23:54.363031Z","times_seen":3302,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/blocks/cover/style.min.css?ver=6.9.1","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 07 Feb 2025 10:16:48 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 1900\r\ncontent-type: text/css\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-08-11T06:23:54.388885Z","times_seen":6551,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/js/animation.js?ver=1.4 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 746\r\ncontent-type: text/javascript\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2030,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-07-26T18:42:30.123145Z","times_seen":50,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/block-styles/core/group.min.css?ver=1.4","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/block-styles/core/group.min.css?ver=1.4 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 1460\r\ncontent-type: text/css\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12608,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12608), with no line terminators","md5":"b033f137838db9bbf01ea5549ac9f056","sha1":"72f0a764972f16dbaf813be6d60445ef951c0736","sha256":"23e284ad6dab8f1f841d8b59b15b64bd31543a5c6225eb560c10362760136f5f","sha512":"ae5388b720de988cf378c5a1440945db975bc2326dd6833332393ca2a57996109b5a8a1909df3649dac72d0ae39d293971965e37d935cd0a7f3e8cdadc64907a","ssdeep":"192:wRCqSCCXx34is6RMWk1fOqvx3HbWhMHitojkoDSdknuQDaIEtCXU5OTw9Dwhevkf:wRCfX1L+Hu9Y","tlshash":"9e42d9a5a764c4a688c506909ac421b60f1fe301de6189ef739a83071a8f3d917fd7e7","first_seen":"2025-07-28T22:31:59.391751Z","last_seen":"2026-07-26T18:42:30.117675Z","times_seen":40,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/images/style-book-hero.png","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/images/style-book-hero.png HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 175276\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nx-newfold-cache-level: 2\r\ncontent-type: image/png\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":175276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 387 x 377, 8-bit/color RGBA, non-interlaced","md5":"3c01efc1c35268322b7b3bfa63df9c3d","sha1":"f29a7e90a580676f2d29cd5b0788fad6229e53bd","sha256":"1cd8882c520d66c719c4589a9c0e749f717b466cb5e1e20a4e6eaa7a6288dd4e","sha512":"bdc0145a383e01c3c61c938302284c215cbf4c46ef03f33ecc5ad0fe7e605c4a60c5c2d8cf727014aba96057ad300c5243899ab0584f717382ce5e2bbda4b03e","ssdeep":"3072:YxfAmtEFj0ErT+IAgjZKynNdEDHh9cmzMK6qLBpdJiNP:Y1A9j0ErTsgVKynNKvcmvB9piNP","tlshash":"730423e84e3d1b3f638a0871871fd5a2be5d8eb189a6b54b4833994e8d773026480707","first_seen":"2025-07-28T22:31:59.396735Z","last_seen":"2026-07-26T18:42:30.126523Z","times_seen":37,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":527,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"sanity-proxy-v2.phantom.app","tld":""},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:50:33 GMT","end":"Mon, 23 Mar 2026 14:50:31 GMT"},"fingerprint":{"sha1":"15:6C:B0:68:44:6D:1B:D7:EB:0C:20:32:ED:64:62:10:40:86:51:6A","sha256":"99:DD:5E:68:3E:57:B5:DD:AD:1B:7A:49:EB:3D:B9:29:48:15:70:C0:25:5A:AE:55:13:B9:69:02:69:46:FB:68"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=786432-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nCookie: __cf_bm=OXF7MRKSzOk5I5L3OZFg1zlWkwoBHi3d72D0htbYAvM-1770469656-1.0.1.1-vNVJuRxWdEKKGfE7E.EzBjteKopIf8QkUvUEACmtcKiK5gYRkW7ASJei.buWJeHnFpE4QzgITdTvTC52zix0hnN59l_Cn0cIW_XsT9vkr94; _cfuvid=nICAX8_0PraI6pbTvAFniZO0kQlWjOZ2_6FPB4483w4-1770469656338-0.0.1.1-604800000\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 07 Feb 2026 13:07:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6421831\r\nserver: cloudflare\r\ncontent-range: bytes 786432-7208262/7208263\r\ncf-ray: 9ca31c794abe0b06-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 259301\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":69739,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"46a619388e3c94e19d9206ccc03c9b73","sha1":"4508e7d5308acfc1e99465accea8c9e2d2de834a","sha256":"8ebe36cc597f031229b6e8860245357435a2daba6f1aa2b2899ae5bce12f6afb","sha512":"2d77246913502cbc2494e3a8168c59471ee0ea3d321b0705cd6e2e06d4a553b0c77cfaa316db80eb8708f051749862fb6f9b9e6f0b233095bda04e47add9e476","ssdeep":"1536:dFExYA+Qd6oIBWVxgI24kOzWkQysVEfVL0SQPlh7ZbK17+pTz4KK4AbRncND2GVA:F+d6o4WrbWkQ/EdLpQtjbN0KTknkfO","tlshash":"78630262867370dcd829fdc5ec38f0c33243721db2975928ec2b164607764d96fb68a6","first_seen":"2026-02-07T13:07:59.613119Z","last_seen":"2026-02-07T13:07:59.613119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 07 Nov 2025 09:14:34 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:52 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 5657\r\ncontent-type: text/javascript\r\ndate: Sat, 07 Feb 2026 13:07:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T06:53:52.947159Z","times_seen":310855,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/favicon.ico","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:37.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 07 Feb 2026 13:07:37 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Tue, 13 Jan 2026 20:04:07 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-08-11T06:20:48.725548Z","times_seen":14082,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/fonts/instrument-sans.woff2","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/fonts/instrument-sans.woff2 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88476\r\ncache-control: max-age=31536000\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\nx-newfold-cache-level: 2\r\ncontent-type: font/woff2\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88476, version 1.0","md5":"1a10a9b26020185af43c81002ac33316","sha1":"183eaeb794357a1c80af8cc64b280298e03e08cf","sha256":"8d93e0761b10a433a72768b15bcf1bd293b7b20b9c74d8299fda3cec0b6e59fc","sha512":"71d59f963017e925f46018000fdb94e6ce06c300ab9444deb92d4cf7d3fcb9ab23aa7bf6d3a305e3ea50771c5ffbb688e2801b16a571e30431acf8c57f7a47da","ssdeep":"1536:6ZaXrkHvhjY/AVOBfyaNlc/4SmjLJNCoh403fXKdeuPbmmcn6fGmPwpSLF:6w7chj0J5W4SmH/4yXMjmAfbrx","tlshash":"248312d3f9f5e310d932ac29eb354db63b5339327a9bc49adc120506139fae880d6e00","first_seen":"2023-12-05T15:08:09Z","last_seen":"2026-08-01T17:04:02.487127Z","times_seen":190,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 29 Jan 2026 18:07:52 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-type: text/javascript\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-08-11T06:23:54.38583Z","times_seen":5865,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.phantomwallet-s.us/","fqdn":"mail.phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T13:07:34.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 07 Feb 2026 13:07:35 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nx-redirect-by: WordPress\r\nlocation: https://phantomwallet-s.us/\r\ncache-control: max-age=7200\r\nexpires: Sat, 07 Feb 2026 15:07:50 GMT\r\nx-newfold-cache-level: 2\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114828,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":1272,"timings":{"blocked":285,"dns":1,"connect":136,"send":0,"wait":702,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"mail.phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"mail.phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomwallet-s.us/wp-content/themes/acai/assets/css/animation.min.css?ver=1.4","fqdn":"phantomwallet-s.us","domain":"phantomwallet-s.us","tld":"us"},"ip":{"addr":"162.241.27.225","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomwallet-s.us/","date":"2026-02-07T13:07:36.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomwallet-s.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 14:17:30 GMT","end":"Thu, 07 May 2026 14:17:29 GMT"},"fingerprint":{"sha1":"00:DD:92:6C:90:E9:E6:D4:33:96:7E:97:C2:0B:5A:E9:12:6D:54:91","sha256":"45:39:6E:AB:EC:B2:46:9C:FC:F1:48:24:10:74:AA:26:1E:DF:84:C4:17:60:FF:43:C2:34:2D:20:04:3B:38:09"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/animation.min.css?ver=1.4 HTTP/1.1\r\nHost: phantomwallet-s.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomwallet-s.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Feb 2026 15:43:50 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Sun, 07 Feb 2027 13:07:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-newfold-cache-level: 2\r\ncontent-length: 805\r\ncontent-type: text/css\r\ndate: Sat, 07 Feb 2026 13:07:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6369), with no line terminators","md5":"6462d2876635d3e792dacdf1c71715df","sha1":"ff9c64d6cc5f38efe38383ecb08d705db2c39ced","sha256":"2a66b20e06ff739787385b42a7b126bc38152ad2ac915852b34e09ad4963bf5c","sha512":"8f41b28d3cc938de0d5ad13cda3bb6ce32fa2fc44dad992fd0710a625f6f1faa976c44ad60d50a20dc5fab8a87f63bc7207f96684a9fb7defa0d49dcb805aebf","ssdeep":"192:Grpow3SesABfoxNT0qt1xxqLP7X7Xr/beNFRR1dhhd6iFnl7R79jhT6rV75bFrxd:0x","tlshash":"d7d1a4d356ac942983430f37084ee0894c77ef725906b699bf6d106d0ab8d7c176b3a7","first_seen":"2025-07-28T22:31:59.401112Z","last_seen":"2026-07-26T18:42:30.118244Z","times_seen":49,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"phantomwallet-s.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-07","alert":"Phishing Block","trigger":"phantomwallet-s.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}