{"report_id":"6573edd7-3a13-4938-a1b2-45f0c561c1e2","version":6,"status":"done","tags":[],"date":"2026-03-09T00:37:14Z","url":{"schema":"http","addr":"wallet-phantom-live-zh-hk.my.canva.site","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"title":"Phantom Wallets：全面概述","dom":{"size":134049,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53734)","md5":"b1e589e86671175d2498487cebcda772","sha1":"0c748e43ad982b1f32023c4084e50fc5bcefe236","sha256":"c2462b98bbab5fdcfbb4d02a04b757afbca84b98c1ed1da01a50e6d12416bd26","sha512":"bc9759dd74e4a252a7bc0debc9df7f2ed492f7b043627cc7c796b3d8faf5d1518e638af7feea63fdde4e0477364f5808284c363cf9ab31a6bf1e181ff6493aa8","ssdeep":"768:hspJq2VNp1XM6H5ejrLLCRLCDmimkhUfiK3g7pk8CFMw9XFAx5dYPCCCt/E28a9u:hspJ/0iimkNtCmw9XFAxHH/E21hBdy","tlshash":"01d3a50523268a46416f4c9e7253bb2c2659f71bb7c20ef977ed092ecf8946d53c2386","dom_hash":"domhash60b40170250e28331f91444e421061f8","first_seen":"2026-03-09T00:37:21.409814Z","last_seen":"2026-03-09T00:37:21.409814Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wallet-phantom-live-zh-hk.my.canva.site","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T00:37:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"wallet-phantom-live-zh-hk.my.canva.site","ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"domain_registered":"2018-04-03","domain_rank":0,"first_seen":"2026-03-09T00:37:18.41014Z","last_seen":"2026-03-09T00:37:18.41014Z","alert_count":62,"request_count":62,"received_data":7375938,"sent_data":45948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/90e8fbddbd415f91.en-GB.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f90706809ad062326396455ebfaa9199","sha1":"7626ceb96515c5481332e7006d81d0cce66b2175","sha256":"e9ebeb44d8dd83c12bc940028dbf7dedea96896d8f851b24c499d3f795f9ed66","sha512":"f1c733760be47f9724729fbfbc66bbc9ce5405d4c047299fec870b9a4d49895c744526968d061ebd7adae937919255f4b700f5cc5a667c038f2ac9c96a304e6e","ssdeep":"","tlshash":"45d05b5600d56794bf770fecd36a25c51c3103141452d5ac4872015137f5c5bcae0094","size":265,"data":"","first_seen":"2026-03-09T00:37:21.456277Z","last_seen":"2026-03-09T00:42:52.719135Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2c8a3e3f71cd69cd6270a38ea04504b","sha1":"adee2dd43a73ce4b90d805e24f286b9e66db1182","sha256":"9c35acc3287a01c0a74897c576a20afe9f33869d6cce8f30707551b35d5319b8","sha512":"59e8eb9cab7c7282df8da8947e33e38d00946a42f596aba841684a4cc6f94bc9a64569ce076a71cc4a676671a3c73693bf074f6e3ae00190decbefd9370becca","ssdeep":"","tlshash":"3cd095935787c950a9e79d1445da15f4059c0716b08511711acd50899d1dd07f387c7e","size":271,"data":"","first_seen":"2026-03-09T00:37:21.458666Z","last_seen":"2026-03-09T00:37:21.458666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/178e2329cbbc6c59.strings.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"47fb9805c5037991ae202aca2665ea33","sha1":"ac2359ea2403feff0b8fc1e841eba97b814f2988","sha256":"22fb94a266e947bb3ed3a2af56c45f11f15c244b2b6e95428910d0a697ead663","sha512":"cb6a619170c8373607c351ee7effe54a3826139d3c8a4ebee9e330762f803285418e03e109456852b27f858008a87892250555d0f58b20b882b8d5366ecd331a","ssdeep":"192:bIoUhdnBcatxFxVFCT8CpZNXsAbYT58vaKhW5j1HVy57kFCEIICLRY8eZY:b7UhvcaBxVCXsAeSvHc11H8ZFEIICt","tlshash":"2b32d609e641c22cc6514e8e17beaee1f55bc1a997a01375fc99c068d35783c3bb78d4","size":11544,"data":"","first_seen":"2026-03-09T00:37:21.453712Z","last_seen":"2026-03-09T00:42:52.72526Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/a1107a5a91a4c581.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c93b79520c424a3e6220b5c61ff1bc7e","sha1":"c34f66ea220acb309449c64c72e9e8049b031dfd","sha256":"85b007e9bc3ef1f215059b513ebaa6ab55f9a2ab155fe84cc32ee19bdd8f8a94","sha512":"6576ad2b502d339bc63075420e5fd58fc6736b0373656a7f2b0f4f224ac90b4bcaf2ec9e37c8485b3fbb1ac0e4396eaf4100226b9dad4106ddb74c083ac4dda1","ssdeep":"768:63c5fB74v6ZO1n5DEM5Qp2S9+MDPucKBMirKpuRTaNCqXPGmRneYlUwqC6UZ1/V7:wc5f365cKBMirWhZlUpYSWluB8Ir6292","tlshash":"f1b3faaeebe768ad5352bc75c87ada9cb4df38b18010e2791f34885b5c2412fc85ed14","size":113939,"data":"","first_seen":"2025-03-04T01:27:46.717989Z","last_seen":"2026-03-09T00:42:52.715109Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"975575a9756c66f755af323c9ebe5b09","sha1":"5ffe7811d2c9ca914961eabb4a8fb0dc7320bc13","sha256":"87ac847199cb241d0f4e9d3259cfee338e17696f065ea1d453412f47c067d913","sha512":"d7cf87ea9c70a530db8aef03258b6312aeba6eb91478a701c7e2ab3e7884c63b7be0c1cff578d4eb90040b0dd34888784382959a60c634518b2819355c69ced0","ssdeep":"","tlshash":"92e0c23658a6047122bb81392f9bea0227202183ae05ea5dbb4d4a891f40d1c92b06d5","size":299,"data":"","first_seen":"2024-11-08T09:02:36.362715Z","last_seen":"2026-06-05T01:37:36.226497Z","times_seen":2010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b59064fb8f1aa77295f59a4f5e226565","sha1":"0506e6562d14f79db6ce5fbbc93ac692d7bd9213","sha256":"ef98aaeb8a0712d424de5b5202b02b51914837bac061ca4087e83dbe1a6119fe","sha512":"b1b7c5dbc2bc6c45e0dff93734204de88810f58fd86872b629fd26e983775268f91c5618da3b0f3037274292f40979bf7845ebbe4ada3d867775f31a3f3ff0f8","ssdeep":"","tlshash":"7041cf7e18a9b57111ff24fe929bc6c97a306886fd455c96386c9f512f428c2402abcf","size":2279,"data":"","first_seen":"2025-11-21T02:46:50.382594Z","last_seen":"2026-06-01T18:42:29.421879Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/6b0b6cd7b4380852.i3d79q.vendor.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4f3ac71a3e615b092f8a3e7b36ae5c7","sha1":"cf3ea967714bf4d32dac3091fb742293cece685a","sha256":"686cc2de51d70ff38332193a4107e9d4edf9fc0f3b1814984ab0a1e1709769e5","sha512":"825488d5970c531f9f109a96bfd61c804d6d342af9ebfb8e91447e14dac0eb4e8d36d5cd19ec46e3c5a43a98b4e1fb6012a4e2e713cd17e7704c67927bd4f46b","ssdeep":"3072:s2SsRRbZsBaLfxQQX+724heWQu1+df+M+p2QUWL9Pmj:yajxQQu72vWt1+dl8vngj","tlshash":"b424e7d87a96f1a157b352b740af1407b33d291b280c8960f611fcc979b841ea17bfad","size":209427,"data":"","first_seen":"2025-02-05T20:56:42.413624Z","last_seen":"2026-07-04T07:45:20.338729Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/b2158b2b2e5f1853.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3acb0594a30a6808b7166c7690887385","sha1":"d043496710aa925b7f8a106e93579443e51a1720","sha256":"a501e6f5bacd7aff1a974df4e7add93fbabce2a0b00111671257b32a0646c954","sha512":"57bacba14df68248480bf48fe336a569b98ed0a3e3d5e868aa86bb801769a6333a8ca5a94550bb7a7c78235607c8b9b566ab68db6434f0c52bbd8e6e6c97759f","ssdeep":"","tlshash":"58112f48b55bbe3300ab24b5812f192009b680a0b806a9ceb7f63df850f1408d725cb9","size":863,"data":"","first_seen":"2025-03-04T01:27:46.729387Z","last_seen":"2026-03-09T00:42:52.699145Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"59b4c3d34d32500470aec2f1d67fe685","sha1":"887c0c5b4c9d7142292f9b5e6bf8b64096f0cb09","sha256":"55378ae71af2ecd6bbc1e3ed2b7bd32d9d0fe222140e3b3d5904fb84935306ba","sha512":"2f2d86b492687ddf3ac507de931fb19b49227b233ee29e6a950d4a9deda5671557458a3848fb0fd3bfcaa1e28f736366c7d23d4a751eb35ac46dc7f74cf22329","ssdeep":"","tlshash":"5e900204945a9125491c14181641d615d45244a245ded95b192085361be72d7d400bb1","size":52,"data":"","first_seen":"2023-03-07T12:59:30Z","last_seen":"2026-06-02T00:43:17.198167Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c1f008b1f21b570659d95bdc14efd8f","sha1":"62986772bb708dfb996aa9731fdfc94dc98ba6e8","sha256":"546ac5ca85800e20521ebbeffa3e5856022e3b56a11cfbd743696364d1137755","sha512":"a5f62aa12b8e2d7fa22c491e12e9fb72bed26097c54b6556c947d6200fd35ac2f51de0e66b400d2b48c76ea98bc83bb79463f62393b9e046c36a109e6fa06ee6","ssdeep":"","tlshash":"12a0112028880232cca888808e820020c83080aa08ac0a002a280a3a2aae0a2c800280","size":72,"data":"","first_seen":"2025-07-01T23:02:20.504231Z","last_seen":"2026-06-02T00:43:17.199197Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4c890ff2243345821db61118c0c0cd7","sha1":"223edd9d7dbada9ec1f1fa370e35edd55b4a8036","sha256":"74afcdcda43f659c79d9c447f71bb1f4b8cb6eb27d5b614d360c46eab14b9df7","sha512":"268d2c15c43d496de4ab4794270cabc4c98380476f7e23748c7adaf3077231562c19ad606d99dfcebcc986a369f98b2da5c3caf0e61f779a3f573e88c91b1919","ssdeep":"","tlshash":"22c09bbc1515243f1955565c7157daf43d36147261711510e55c502d4465d9790438d5","size":133,"data":"","first_seen":"2024-02-16T21:25:19Z","last_seen":"2026-08-19T19:44:54.919718Z","times_seen":3168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/0416554fea01ed4c.runtime.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"99213d2a2fda3fd93251f7dbf3dc6276","sha1":"e8d390fc1626e7e56dcb137c7173a657cea371f5","sha256":"cd84b9795119772d5e21e0917bd94ae46507c445a9d541653417c58e4d7ac9d9","sha512":"006d4163f9d0471271ce26761aecae1d3fbe73911a83e9d1536ab5cb22a4960bd969b55156df06cceaafc1899ed05924abd4c1b3399699519e79577f945e5985","ssdeep":"768:LigIP6bIm6a8FZ5w2V4j2Fvz0shviAFu48rLgV7Xg/cCpph5PIp:LiVqM534+Zi+mkXUPhIp","tlshash":"fbd2d6da36b24266d4e53fd4b9aac412342c1cea24ad5ad0d7db39e8ff50b62d033513","size":28908,"data":"","first_seen":"2025-03-04T01:27:46.715403Z","last_seen":"2026-03-09T00:42:52.739008Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"04e91e7fdbd02e9d7ea98a6ebbab61aa","sha1":"0a5f39e6a1aa1d5cc587b0346867f04da49e947a","sha256":"9ffa4b5bd2f4d75cad1c245b1867f18e359ac7503b7c6a3d04a450afc9ca30fe","sha512":"57f260ac4faac91cb3e7c1a70429b2dc6dd4e54636891949c11d5121d4a7293497142baf6c5ccfc1b6a17aa3ec7d7037b72b1baa5ebc76293aff3489e8b8cd62","ssdeep":"768:z5dYPCCCt/E28a9gkhzDTMqCW4nfUKCfUmGIJuOgTu:zHH/E21hBdZ","tlshash":"1e03d00b36276adb9d979c6b71033431b5ddbe2872c0568493e2ac2dc4f687d678132b","size":39187,"data":"","first_seen":"2026-03-09T00:37:21.46622Z","last_seen":"2026-03-09T00:42:52.749048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/1937bd951aefb8e2.vendor.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d67fca8ed3801dd12bac1df267ffd11","sha1":"8da141ff819e5a7c484f07bce36671c4d4ac8bc7","sha256":"2e6bcd1e25316fff49e9d1f2effcd19c7c8403cdbe54d07ab7d8e4e7046ebabb","sha512":"5f13d110ca39b9f13d020241d734d8b7e1e91996634287cab9f3f0ab9f98ee0eefe018852642b05b899e2a4bfc035cb93c8fdd1a7462924357c25bf78f84119c","ssdeep":"6144:ao8ufPVaNFJj2+QW5SagGKRi675TJt4SEYpMbms8tTM1t6vGo1Iq:v3bt49YpEms8tTMqvf1Iq","tlshash":"5094fb88b291f4b157e761f5402f050bf33a7869704d80a4f268ece56cb998e617bf39","size":447750,"data":"","first_seen":"2025-03-03T18:23:23.552154Z","last_seen":"2026-03-09T00:42:52.74055Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/880e6e552c388ec9.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"780b7d0b7eeed5e2a430beb6338ed8f9","sha1":"1e43834bebf19bc895dfd97f02ef0022988c292b","sha256":"87d6c9ebd2a3875b13ae9882864fd288d1801a72103ce7f9a06e829cce05cd51","sha512":"2d652e1585de8ad0670e604cd1e89b074fe97b51b2fe3d165a9a2c36936c6cac818f3f27804d839c7f3b0161df6439ac26aae8b8b3d0a9b6a726af1ee1cf6e4f","ssdeep":"49152:n3idvZvyj45Hpa6R/sPujpE2tayA33EMsUFFvuIBi/lOp3EoCmIbegxtdiMcx5Bt:p4i","tlshash":"41952a9572a3b05a8233d8d6903f0056f53abe48f04cccbcf6aed9d67854945627af38","size":1881985,"data":"","first_seen":"2025-03-04T01:27:46.726772Z","last_seen":"2026-03-09T00:42:52.745182Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/97b496bb4e206611.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c930fca2a3c79b8899950ac307eb402d","sha1":"df9c641c8198f9f4e8019febde9ee5ccb588fa2c","sha256":"958435c7969909c1db8573348161686284c62fe6fc54e9ee758bf97037c44a59","sha512":"2db0657002f5eb1748b4b80f2f5d375f7f1d37dd0b634f412b2232b41087afc9abc1118ffe7f708f184b41cb723eaf06374bab36cb239958cb05346780c32b67","ssdeep":"","tlshash":"9661a7686298f42960379ee4d14f391771c7c280fa0a8e89fe34bd2c603645d37bada4","size":3449,"data":"","first_seen":"2025-03-04T01:27:46.732898Z","last_seen":"2026-03-09T00:42:52.720721Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/d9262637f6d670fb.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8fb133c4256588dffc1704761f47d96","sha1":"9670b341727edb7c4334264100b1eaca82c5356b","sha256":"5d4ce7df385a6e73808ca19647770f12587e9ecaa03e8e02cdefa05a8a5b54aa","sha512":"1fe50762ce225001d675a278eb15d937810c61fb86b2bcde6d62ed0cbc7dbcbfa6388b63d8ac4d10f324dd4d8432cd2d2fc755f3a0ffe189690798f050ea8bdb","ssdeep":"384:yRigi0vkbA7L2CTAhATIxAakJiN9sYpKVQdttKJLRSOGRfdSAnBQaDBkqToNxW23:yR40vkbA7L2Cb34LsYoOdtsLRSOSfdSz","tlshash":"cc6207d4b25af15ca1a398f0d43b4051f61e25a0f84cc8e9fabddde87868c44e163b78","size":15747,"data":"","first_seen":"2025-03-04T01:27:46.686494Z","last_seen":"2026-03-09T00:42:52.741433Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/8d3fed7a7f212614.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd0a573637510670a58183525845fd76","sha1":"1d4e6c1f41283ace83cb41af761d75532b0bd3f8","sha256":"2ae0324d7879e4d727e25b11cff248e1f56cf82d14bb66163f53cfcb4fdfbd1c","sha512":"8b59d88eb65783934086f4e946c56b36f4095ccb9e4b76a35489d888bf8400ed5500ec4ffbfdd3de875602c3fd520d009f198971aef38773b773ad1d6fd62894","ssdeep":"","tlshash":"f7e02b807546fd12205b38fa820f2b302667c0127865ddceb3725e7914b2809c396cb5","size":410,"data":"","first_seen":"2025-03-03T18:23:23.5583Z","last_seen":"2026-03-09T00:42:52.737154Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/877f1f3236922f7c.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6ad2cd1ddfa8d82b6dc159d8c6104bb","sha1":"959017caec2f78fc03a99a7e71452009169dec1b","sha256":"51bb4c6f29479787aa875d23caf11a2518a548373988e2a1cb69068395f2eeb6","sha512":"ee283579aa8c1ee215ae0318178f7d6e2dd69194c9f22689d89e52e421c8a900ab2305099229bc0574fe9829d16afb8ebc2d34d8e471095211606fde9a1350c3","ssdeep":"","tlshash":"7ee02b807586fd12305b34fa820f2b301677c0113826ddceb3715e7914f2809c396cb5","size":412,"data":"","first_seen":"2025-03-03T18:23:23.553179Z","last_seen":"2026-03-09T00:42:52.713514Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/f4fd1444dd0ddcaf.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8b4f3564f9a5621a22be03c43dfb340","sha1":"c94d31129c085f89dd0927090bf4a5e9eb696e11","sha256":"0b79f5029f41da3872d682737e37c7fb22742d720360867b76fc487b04544cff","sha512":"6ccd95d082cf8588c1e54ca18d50c329e19ad3ad4fd460aa8d7ec5666ff1d6f76d672ef608268f889f6bdcfe0b446760e5f221c202780eff6b872cec05282064","ssdeep":"768:pjZJLbC5zP5AmZw0i2yoy8dZ+amCX/bpUEeq/2drIet0LlG2mjDFUgdBcqiOW0ix:pVJLbWzP5AmZwAdZbmCX9yI2VIet0ttX","tlshash":"4913f865e973f01cd137cc9ac07f0066b11a7f0d7208d8b8f66b9dd61868586322ab7d","size":42732,"data":"","first_seen":"2025-03-04T01:27:46.69838Z","last_seen":"2026-03-09T00:42:52.733581Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/3ef1855c1140b34d.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"140a8e26c8a955dc43af49e99ace23d5","sha1":"c0cb23091a5310e90ae11dc341414dd8d3ca8068","sha256":"e63c706280354bd9271aaffcd9a01868abd4b45ea3e10020cdc184ab1c412de3","sha512":"b018bf5ccd0fcec15d2314a614cf5a3515eec7acf491d52776f3b9f623fe09169ded4e4787c148e3e49e82aff92aaa2712c3a021c66c3718449ee182e257d74d","ssdeep":"192:tQIB3CHLbWv9mdb/Zq2lbSl3CTaFaV0CFNjjddmFj9QWrGUHsrXClvP2aZs3tzCY:aIBALbWwRZqvl3yaFpCFNj/mrQUGPr6A","tlshash":"a4320714b6757052817be8e8e03b142a7528b890b40dedfcb65aded8d470d932375b3c","size":10952,"data":"","first_seen":"2025-03-04T01:27:46.727851Z","last_seen":"2026-03-09T00:42:52.732034Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/4e4ccb7c43acbd67.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd85ffce1141819d8bef325d8454c71","sha1":"c1eacfaa7e046e4d47c6fa03126b93fa9058d055","sha256":"9d6f24efc0491e7cf7a592a8b0b2fbb9e857e2cea78cf900af2c49c2d380a7bf","sha512":"c7927c8026730d2fd018bed08d60d15589b309740b5150615db23d163952d62711b2b660eeee52a1baf6582645aa76b657f5a383f869387763747f624d4e3ce0","ssdeep":"","tlshash":"dce02b847546fd12209b34fa820f2b302667c0217829ddceb7715d7914f2808c396cb5","size":410,"data":"","first_seen":"2025-03-03T18:23:23.559297Z","last_seen":"2026-03-09T00:42:52.706944Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/f4fd1444dd0ddcaf.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/f4fd1444dd0ddcaf.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9229450731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42732,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2035)","md5":"f8b4f3564f9a5621a22be03c43dfb340","sha1":"c94d31129c085f89dd0927090bf4a5e9eb696e11","sha256":"0b79f5029f41da3872d682737e37c7fb22742d720360867b76fc487b04544cff","sha512":"6ccd95d082cf8588c1e54ca18d50c329e19ad3ad4fd460aa8d7ec5666ff1d6f76d672ef608268f889f6bdcfe0b446760e5f221c202780eff6b872cec05282064","ssdeep":"768:pjZJLbC5zP5AmZw0i2yoy8dZ+amCX/bpUEeq/2drIet0LlG2mjDFUgdBcqiOW0ix:pVJLbWzP5AmZwAdZbmCX9yI2VIet0ttX","tlshash":"4913f865e973f01cd137cc9ac07f0066b11a7f0d7208d8b8f66b9dd61868586322ab7d","first_seen":"2025-03-04T01:27:46.69838Z","last_seen":"2026-03-09T00:42:52.733581Z","times_seen":5,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 203232\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd97ad420731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203232,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 203232, version 1.15139","md5":"fc158c702f95747bd895cec9ee6c5749","sha1":"2e8ab4664a87ed3735dab1f1ca78e97796a7342d","sha256":"a944f637083a93abe190a1c53c2179d3da3e3f179f3debe076e1bcae375877d2","sha512":"8a882751bce35b582a9ae17ad92ff9420183774e38d70db0bfffd245ccd2306a506ea274578516c6dbc103ed0fd3e3a346a0f2304e48fb861563943dcba1f342","ssdeep":"3072:nlYBrCSeMS/Yyho1JFBxaAueqjVlPUKmLq+CS6DoJpIEYMbODMWrOdow4R:nlYBm8oYyC1LaAZAlsvRRpIEdcFr3NR","tlshash":"ae1423c3670284d946ea58320d4933fd86ead19785beb133c5ca98443eef732a6914fd","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.481675Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":43,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 201132\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978cf80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201132,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 201132, version 1.15139","md5":"1da7b78b095470252a023e5943d6bfee","sha1":"826268dec35cbdb1c1d750f8578cfdad5e34ca15","sha256":"8af7572662b43186ff6cecd57be6c89af823350c12d790dfd0ef1458c2f62996","sha512":"9d6ad16afac668db116f011bcfda4e8e01ea66bd63b8f27a89c3b7f90dd120d156ea3ccb495e649fc273350f300d509afa6ceba55fe4f51b7ac4ede96998d0ab","ssdeep":"6144:Km/vYXMmxVh7iOE49yPV7WQJLgz8AUJefwEuriA:KiY8mxV409yPViuLgz8yRuJ","tlshash":"851422fad301c0494bc94ae8a20c7857b01c57db7a7695442dd867fc65fd0e8ceae0b9","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.437654Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/106ff6d2a1d1c94c.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/106ff6d2a1d1c94c.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9229560731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2621,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2558)","md5":"aad820d136afa4b8f63c95d07a6c1f6f","sha1":"f50080a1494822d8173fe1a51f92a593e40d36f2","sha256":"a90dbb2fb0eb23458eb52b6ca75949058404034daca370b44e0bcb8840b938d8","sha512":"aabf04ecd9daef8c79d5ffeb6581167a5a875a78273f1e79fd24ebfe521559ca639c59cd1122c75a7889ecd3ad4aea770eff565284609bbc3c1ced82898429d5","ssdeep":"","tlshash":"b551336896e532b45276f270ded12f4c4a3ed026c87b579fa220b638cdcb66d1d3641c","first_seen":"2025-04-07T22:43:42.269892Z","last_seen":"2026-07-04T19:47:53.380667Z","times_seen":135,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/d9262637f6d670fb.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/d9262637f6d670fb.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd92295c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15747,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3810)","md5":"e8fb133c4256588dffc1704761f47d96","sha1":"9670b341727edb7c4334264100b1eaca82c5356b","sha256":"5d4ce7df385a6e73808ca19647770f12587e9ecaa03e8e02cdefa05a8a5b54aa","sha512":"1fe50762ce225001d675a278eb15d937810c61fb86b2bcde6d62ed0cbc7dbcbfa6388b63d8ac4d10f324dd4d8432cd2d2fc755f3a0ffe189690798f050ea8bdb","ssdeep":"384:yRigi0vkbA7L2CTAhATIxAakJiN9sYpKVQdttKJLRSOGRfdSAnBQaDBkqToNxW23:yR40vkbA7L2Cb34LsYoOdtsLRSOSfdSz","tlshash":"cc6207d4b25af15ca1a398f0d43b4051f61e25a0f84cc8e9fabddde87868c44e163b78","first_seen":"2025-03-04T01:27:46.686494Z","last_seen":"2026-03-09T00:42:52.741433Z","times_seen":5,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/e5e43f51d6d7939d8911c861efa5f9b7.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/e5e43f51d6d7939d8911c861efa5f9b7.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 43356\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd937c240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43356,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 43356, version 1.0","md5":"9826acef05bd6cd0d11f682a193401df","sha1":"cfdac096a1f2476bc967259a53bf1b71c4b4306b","sha256":"717519629f1213b6c58ec652be28e726006fd45df705f7f6c631f92efdf78633","sha512":"451b9d635c0386b4171c46364fdd0ab12be98903bc2721855c3665bfc89068786c0e38bc705b23ca762a06ec91b25bd6d319a9fe234646bbb31ffef7376ff90e","ssdeep":"768:2J1Rl2qpFadQeDGv8iMi9ocx1TgGb/RskTsYxOgheSqYIe7l/yHc80ufT:s1REcYPDox1TgGb/WosqHqYH7l/y8y","tlshash":"a313f25e176bc51ad221ddb0f5861ed3b3658d0e1e5211f022f4e2591ec92d3e8ecca5","first_seen":"2023-09-26T21:42:42Z","last_seen":"2026-08-19T18:29:30.596285Z","times_seen":382,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42500\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629a90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42500,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42500, version 1.0","md5":"35a11f6a81a4fc01ba1480668513d5ef","sha1":"4a7d1f90180d7e2649fe5fa43d03c374285ecbb0","sha256":"6394ed8f516a766a09242489bed086da0abec3b608a02104e662abdb026c9d67","sha512":"649351d13701bc4505a3c2511ad6845a52054e7531df4aeffeb010885f0167438cb837ff144b09c45a8c76dd96a61ce3b382e09e04785c8f5e525fe0b244d849","ssdeep":"768:wsHVYoZfdNG2XlJeVdjICnsokinVFsRPvNC557ogFY491OibT2ZFn0Fl:XY61NG2XlUIZozHsRXNc7ocR910FKl","tlshash":"ef13f1b1f75c3b5da9c54fb5a13a6c4243f42b91c0fc0e6dab3a185e118918393e72a3","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.446229Z","times_seen":422,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/c69c23593c9bd5705c7780a200f2a6db.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/c69c23593c9bd5705c7780a200f2a6db.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41508\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629b80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41508, version 1.0","md5":"8a83d3ea2e60560ba77baec1cce6881a","sha1":"c1d1ae592ab0019c8092dabe56875a29d5745b80","sha256":"fb1992542fe041232eb0470ec651c97dac516d86bf11d659b542924307142dc9","sha512":"5c85f3c34dbc70fcc76ae45536ad1acc313e69d7a4df0e793f5037da64b230d24a53b730644e5e2cf43780bcd37c70286e32d67001a1eafe442d7450a6e44f54","ssdeep":"768:kEoxtkLck1fY9Ebj8/K0HJ5/LVrK1nTtzgu0hRuddFcALkukQubAaNp:gxtkAk+mbj8/19LVrKxJguyaYALknQul","tlshash":"761302f917225b37ee23d285e03c570e2762d4f81835d794aecf8ed232a93665803785","first_seen":"2023-09-26T21:42:42Z","last_seen":"2026-08-19T18:29:30.539034Z","times_seen":402,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194064\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd97ad450731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194064,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194064, version 1.15139","md5":"bd9b0e8c9f27308a42500f46cab0ba15","sha1":"ce426e13c100dc1d6c293cd3a121fa195763f32b","sha256":"aa9b3d1241d650c7eebe80b8a9d73450a685cad1942a4cec9c754a76ce716f1f","sha512":"c0b149e584b4e527ab79f1641147b8d99640043dd7f6d5ada34bddf49ef2a5d319df0822b3a67ba32b36b4c412cb99b99c40df9d396d51b39ecdb258501dc4eb","ssdeep":"3072:lWA1E2IS4CGxdgapuE7L/qeXwjxseq5IGxjgF3udAjWJp2r8YvVkhsHZUTV8KBfC:l1rIS4CG2EPPwjxsScjgF3ud5u6hsHZh","tlshash":"161412a09f0fd5476ea3fde30d479094079d3bb2953775a3a01b40bbc9b89a713a01b4","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.601848Z","times_seen":1146,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":52,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/0416554fea01ed4c.runtime.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/0416554fea01ed4c.runtime.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd898cd649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28844)","md5":"99213d2a2fda3fd93251f7dbf3dc6276","sha1":"e8d390fc1626e7e56dcb137c7173a657cea371f5","sha256":"cd84b9795119772d5e21e0917bd94ae46507c445a9d541653417c58e4d7ac9d9","sha512":"006d4163f9d0471271ce26761aecae1d3fbe73911a83e9d1536ab5cb22a4960bd969b55156df06cceaafc1899ed05924abd4c1b3399699519e79577f945e5985","ssdeep":"768:LigIP6bIm6a8FZ5w2V4j2Fvz0shviAFu48rLgV7Xg/cCpph5PIp:LiVqM534+Zi+mkXUPhIp","tlshash":"fbd2d6da36b24266d4e53fd4b9aac412342c1cea24ad5ad0d7db39e8ff50b62d033513","first_seen":"2025-03-04T01:27:46.715403Z","last_seen":"2026-03-09T00:42:52.739008Z","times_seen":5,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/877f1f3236922f7c.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/877f1f3236922f7c.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9229650731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a6ad2cd1ddfa8d82b6dc159d8c6104bb","sha1":"959017caec2f78fc03a99a7e71452009169dec1b","sha256":"51bb4c6f29479787aa875d23caf11a2518a548373988e2a1cb69068395f2eeb6","sha512":"ee283579aa8c1ee215ae0318178f7d6e2dd69194c9f22689d89e52e421c8a900ab2305099229bc0574fe9829d16afb8ebc2d34d8e471095211606fde9a1350c3","ssdeep":"","tlshash":"7ee02b807586fd12305b34fa820f2b301677c0113826ddceb3715e7914f2809c396cb5","first_seen":"2025-03-03T18:23:23.553179Z","last_seen":"2026-03-09T00:42:52.713514Z","times_seen":6,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/8d3fed7a7f212614.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/8d3fed7a7f212614.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9239740731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd0a573637510670a58183525845fd76","sha1":"1d4e6c1f41283ace83cb41af761d75532b0bd3f8","sha256":"2ae0324d7879e4d727e25b11cff248e1f56cf82d14bb66163f53cfcb4fdfbd1c","sha512":"8b59d88eb65783934086f4e946c56b36f4095ccb9e4b76a35489d888bf8400ed5500ec4ffbfdd3de875602c3fd520d009f198971aef38773b773ad1d6fd62894","ssdeep":"","tlshash":"f7e02b807546fd12205b38fa820f2b302667c0127865ddceb3725e7914b2809c396cb5","first_seen":"2025-03-03T18:23:23.5583Z","last_seen":"2026-03-09T00:42:52.737154Z","times_seen":6,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_footer?lang=en-US","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_footer?lang=en-US HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=604800, immutable\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd92caae0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18340,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2437)","md5":"d811ec3de9ac080fc67fd73f524772b5","sha1":"75f20e5a37924b0549cd572e67c184a0cc906d8a","sha256":"dc0a7e2e1c3d2ac8ad8143e21d8c76902e2b284dfaa1e368eca5329f77d908ad","sha512":"5a222797d993c8497bbc348ec99adf8f2af45db3e49576c0e22979363fff20c371fc43fd6062aa49f01082ce712e70256a09c42ff36e41b40c6d6d1c4e04c685","ssdeep":"192:73Xvn49EYidpk/4+M4RpScLF00x7qwaDBVxArRoLSN69EUHSN69E9LydZ4KEI0Af:CFSj2liw9XG67Uw6v/VCU","tlshash":"8182d89eaaf30119788bd98dfbe76358373ac003da15cdbab6cc135a4fc346448567a4","first_seen":"2025-11-12T00:34:06.973874Z","last_seen":"2026-08-20T18:00:27.868192Z","times_seen":155,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42876\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9639d70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42876,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42876, version 1.0","md5":"8f4bec1ddf700ed07257978d5663a76d","sha1":"f620b74e20e57acad0a9cbc65b72c96567854587","sha256":"24f4213242badc483a9657e2a7bae4639f346b140f5c2e2a8e32c731fcb47381","sha512":"2e65284fd982d104621a8fc091c93b70d985e52cd2c607ce4e00a5f6d624a17aed63000e7f59dbb612224be06b9cd1ea07a004675e1ade7d1c6aa4cf26a48614","ssdeep":"768:TK+/ZcRK3EIVb0HyQd9gn69p2yMHOflBcOdKlPxM/klsSEp4WCAUTl6wTi1QrJnE:eKkK3EuQd6n6bxMHO9COdWxflsbCvTDO","tlshash":"aa1301d51847fd99e6d2a3ff33b7d5598b21ae450257ddb7ea0058a2c368e1380b80ec","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.459747Z","times_seen":411,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/6b0b6cd7b4380852.i3d79q.vendor.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/6b0b6cd7b4380852.i3d79q.vendor.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd89bd6749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209427,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"a4f3ac71a3e615b092f8a3e7b36ae5c7","sha1":"cf3ea967714bf4d32dac3091fb742293cece685a","sha256":"686cc2de51d70ff38332193a4107e9d4edf9fc0f3b1814984ab0a1e1709769e5","sha512":"825488d5970c531f9f109a96bfd61c804d6d342af9ebfb8e91447e14dac0eb4e8d36d5cd19ec46e3c5a43a98b4e1fb6012a4e2e713cd17e7704c67927bd4f46b","ssdeep":"3072:s2SsRRbZsBaLfxQQX+724heWQu1+df+M+p2QUWL9Pmj:yajxQQu72vWt1+dl8vngj","tlshash":"b424e7d87a96f1a157b352b740af1407b33d291b280c8960f611fcc979b841ea17bfad","first_seen":"2025-02-05T20:56:42.413624Z","last_seen":"2026-07-04T07:45:20.338729Z","times_seen":146,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9209120731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-08-19T10:47:48.678611Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/9ab9136c3bbeb2f7.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/9ab9136c3bbeb2f7.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd92193c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3531,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3468)","md5":"2d1b58de716d0d90ce1a86d457c4c04b","sha1":"dfbcd0153a2f1a90429e90ed65d3524432a42cef","sha256":"48c392bfcf50ed0b4184c6e22643a04170d2521549faaa1c8f2644daef7d4c43","sha512":"9bb731d42ee0d0db529c87860d8d9c9858e9cc95e9e04caeeaeb0e8937e3f7fb748bcac009891c24e50aa5b1a80dfd39706414e7736c65b230370a9426fd4442","ssdeep":"","tlshash":"b571b3704661babc3613a72da6a0df8800b36044dda70bfef990f6a555c34bc15ab88d","first_seen":"2025-02-27T04:14:27.443304Z","last_seen":"2026-03-29T23:50:20.822099Z","times_seen":11,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42500\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd938c330731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42500,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42500, version 1.0","md5":"35a11f6a81a4fc01ba1480668513d5ef","sha1":"4a7d1f90180d7e2649fe5fa43d03c374285ecbb0","sha256":"6394ed8f516a766a09242489bed086da0abec3b608a02104e662abdb026c9d67","sha512":"649351d13701bc4505a3c2511ad6845a52054e7531df4aeffeb010885f0167438cb837ff144b09c45a8c76dd96a61ce3b382e09e04785c8f5e525fe0b244d849","ssdeep":"768:wsHVYoZfdNG2XlJeVdjICnsokinVFsRPvNC557ogFY491OibT2ZFn0Fl:XY61NG2XlUIZozHsRXNc7ocR910FKl","tlshash":"ef13f1b1f75c3b5da9c54fb5a13a6c4243f42b91c0fc0e6dab3a185e118918393e72a3","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.446229Z","times_seen":422,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 203232\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd938c4e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203232,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 203232, version 1.15139","md5":"fc158c702f95747bd895cec9ee6c5749","sha1":"2e8ab4664a87ed3735dab1f1ca78e97796a7342d","sha256":"a944f637083a93abe190a1c53c2179d3da3e3f179f3debe076e1bcae375877d2","sha512":"8a882751bce35b582a9ae17ad92ff9420183774e38d70db0bfffd245ccd2306a506ea274578516c6dbc103ed0fd3e3a346a0f2304e48fb861563943dcba1f342","ssdeep":"3072:nlYBrCSeMS/Yyho1JFBxaAueqjVlPUKmLq+CS6DoJpIEYMbODMWrOdow4R:nlYBm8oYyC1LaAZAlsvRRpIEdcFr3NR","tlshash":"ae1423c3670284d946ea58320d4933fd86ead19785beb133c5ca98443eef732a6914fd","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.481675Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42500\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629a50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42500,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42500, version 1.0","md5":"35a11f6a81a4fc01ba1480668513d5ef","sha1":"4a7d1f90180d7e2649fe5fa43d03c374285ecbb0","sha256":"6394ed8f516a766a09242489bed086da0abec3b608a02104e662abdb026c9d67","sha512":"649351d13701bc4505a3c2511ad6845a52054e7531df4aeffeb010885f0167438cb837ff144b09c45a8c76dd96a61ce3b382e09e04785c8f5e525fe0b244d849","ssdeep":"768:wsHVYoZfdNG2XlJeVdjICnsokinVFsRPvNC557ogFY491OibT2ZFn0Fl:XY61NG2XlUIZozHsRXNc7ocR910FKl","tlshash":"ef13f1b1f75c3b5da9c54fb5a13a6c4243f42b91c0fc0e6dab3a185e118918393e72a3","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.446229Z","times_seen":422,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/e5e43f51d6d7939d8911c861efa5f9b7.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/e5e43f51d6d7939d8911c861efa5f9b7.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 43356\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629bc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43356,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 43356, version 1.0","md5":"9826acef05bd6cd0d11f682a193401df","sha1":"cfdac096a1f2476bc967259a53bf1b71c4b4306b","sha256":"717519629f1213b6c58ec652be28e726006fd45df705f7f6c631f92efdf78633","sha512":"451b9d635c0386b4171c46364fdd0ab12be98903bc2721855c3665bfc89068786c0e38bc705b23ca762a06ec91b25bd6d319a9fe234646bbb31ffef7376ff90e","ssdeep":"768:2J1Rl2qpFadQeDGv8iMi9ocx1TgGb/RskTsYxOgheSqYIe7l/yHc80ufT:s1REcYPDox1TgGb/WosqHqYH7l/y8y","tlshash":"a313f25e176bc51ad221ddb0f5861ed3b3658d0e1e5211f022f4e2591ec92d3e8ecca5","first_seen":"2023-09-26T21:42:42Z","last_seen":"2026-08-19T18:29:30.596285Z","times_seen":382,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978cff0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194188, version 1.15139","md5":"654ba7fa32ccfd8c24e11f29b7156a34","sha1":"e793cfc8775a34158f6c2e2b9b4f8aa9dd3b42d4","sha256":"c2d36a5db423d0a4a5d3a8e16e65b1e5384e476cad41c41d3e3af2622cda5813","sha512":"77f1f87ee469d7786865a7224bc026e8eaf2dd5ba6d6bf6eb9716d68f80f2a0ad4d8961fca25dfd6c5797cd37f33fdef3e3162a99154aa9e5b103fcac6ca7057","ssdeep":"3072:2DB+LuV+P1oE5jssrK+hXI4LLYJwGDU5yFCmoBV+pFtUDLXyKcTkI6ocSJ5mmD0Q:2FsuVnds+iXI4XYiB7BgULXTcT1WSJ5H","tlshash":"dd14132c295b96e481d786a35b0d07d6cca750a5c8defd34576a7d42e1d8f0f830e328","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.603318Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T00:33:48.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:48 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-f1c9cb3a-b499-4b78-9a8a-a482456dd854' 'wasm-unsafe-eval' https://www.google.com/recaptcha/api.js;\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: all\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU; HttpOnly; Secure; Path=/; Domain=canva.site; Expires=Mon, 09 Mar 2026 01:03:48 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd873fe049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":47367,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33982)","md5":"f5d82bd73601916eb1812249d45437e0","sha1":"1b967efdee7b85e38b3bcb32c01534f74d47a36e","sha256":"2b5ab040aa603f36f2cc8e277a63020d9b05ca11f74bee807f87c049c001daf6","sha512":"46e25b86f67cf02508843ac1079562cbad3b6738b8b2b2dd6e7c790c18fc7f9a5328821445232201a818963b07bb46f828d3a0e3a4e8351636517c6ded1fdf9f","ssdeep":"768:6spJxkVNp1kvQ5dYPCCCt/E28a9gkhzDTMqCW4nfUKCfUmGIJuOgTg:6spJiDHH/E21hBd/","tlshash":"9b23430b39276acb9e935c6b71037430b1ddbe2972c05684a3f69d2c85f687d578132b","first_seen":"2026-03-09T00:37:21.428506Z","last_seen":"2026-03-09T00:37:21.428506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":38,"dns":12,"connect":2,"send":0,"wait":167,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/97b496bb4e206611.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/97b496bb4e206611.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd92294d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"c930fca2a3c79b8899950ac307eb402d","sha1":"df9c641c8198f9f4e8019febde9ee5ccb588fa2c","sha256":"958435c7969909c1db8573348161686284c62fe6fc54e9ee758bf97037c44a59","sha512":"2db0657002f5eb1748b4b80f2f5d375f7f1d37dd0b634f412b2232b41087afc9abc1118ffe7f708f184b41cb723eaf06374bab36cb239958cb05346780c32b67","ssdeep":"","tlshash":"9661a7686298f42960379ee4d14f391771c7c280fa0a8e89fe34bd2c603645d37bada4","first_seen":"2025-03-04T01:27:46.732898Z","last_seen":"2026-03-09T00:42:52.720721Z","times_seen":5,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/3ef1855c1140b34d.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/3ef1855c1140b34d.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9239800731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1468)","md5":"140a8e26c8a955dc43af49e99ace23d5","sha1":"c0cb23091a5310e90ae11dc341414dd8d3ca8068","sha256":"e63c706280354bd9271aaffcd9a01868abd4b45ea3e10020cdc184ab1c412de3","sha512":"b018bf5ccd0fcec15d2314a614cf5a3515eec7acf491d52776f3b9f623fe09169ded4e4787c148e3e49e82aff92aaa2712c3a021c66c3718449ee182e257d74d","ssdeep":"192:tQIB3CHLbWv9mdb/Zq2lbSl3CTaFaV0CFNjjddmFj9QWrGUHsrXClvP2aZs3tzCY:aIBALbWwRZqvl3yaFpCFNj/mrQUGPr6A","tlshash":"a4320714b6757052817be8e8e03b142a7528b890b40dedfcb65aded8d470d932375b3c","first_seen":"2025-03-04T01:27:46.727851Z","last_seen":"2026-03-09T00:42:52.732034Z","times_seen":5,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd977ce50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194188, version 1.15139","md5":"654ba7fa32ccfd8c24e11f29b7156a34","sha1":"e793cfc8775a34158f6c2e2b9b4f8aa9dd3b42d4","sha256":"c2d36a5db423d0a4a5d3a8e16e65b1e5384e476cad41c41d3e3af2622cda5813","sha512":"77f1f87ee469d7786865a7224bc026e8eaf2dd5ba6d6bf6eb9716d68f80f2a0ad4d8961fca25dfd6c5797cd37f33fdef3e3162a99154aa9e5b103fcac6ca7057","ssdeep":"3072:2DB+LuV+P1oE5jssrK+hXI4LLYJwGDU5yFCmoBV+pFtUDLXyKcTkI6ocSJ5mmD0Q:2FsuVnds+iXI4XYiB7BgULXTcT1WSJ5H","tlshash":"dd14132c295b96e481d786a35b0d07d6cca750a5c8defd34576a7d42e1d8f0f830e328","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.603318Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 201132\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978d010731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201132,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 201132, version 1.15139","md5":"1da7b78b095470252a023e5943d6bfee","sha1":"826268dec35cbdb1c1d750f8578cfdad5e34ca15","sha256":"8af7572662b43186ff6cecd57be6c89af823350c12d790dfd0ef1458c2f62996","sha512":"9d6ad16afac668db116f011bcfda4e8e01ea66bd63b8f27a89c3b7f90dd120d156ea3ccb495e649fc273350f300d509afa6ceba55fe4f51b7ac4ede96998d0ab","ssdeep":"6144:Km/vYXMmxVh7iOE49yPV7WQJLgz8AUJefwEuriA:KiY8mxV409yPViuLgz8yRuJ","tlshash":"851422fad301c0494bc94ae8a20c7857b01c57db7a7695442dd867fc65fd0e8ceae0b9","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.437654Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/1937bd951aefb8e2.vendor.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/1937bd951aefb8e2.vendor.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd89bd6a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447750,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65455)","md5":"6d67fca8ed3801dd12bac1df267ffd11","sha1":"8da141ff819e5a7c484f07bce36671c4d4ac8bc7","sha256":"2e6bcd1e25316fff49e9d1f2effcd19c7c8403cdbe54d07ab7d8e4e7046ebabb","sha512":"5f13d110ca39b9f13d020241d734d8b7e1e91996634287cab9f3f0ab9f98ee0eefe018852642b05b899e2a4bfc035cb93c8fdd1a7462924357c25bf78f84119c","ssdeep":"6144:ao8ufPVaNFJj2+QW5SagGKRi675TJt4SEYpMbms8tTM1t6vGo1Iq:v3bt49YpEms8tTMqvf1Iq","tlshash":"5094fb88b291f4b157e761f5402f050bf33a7869704d80a4f268ece56cb998e617bf39","first_seen":"2025-03-03T18:23:23.552154Z","last_seen":"2026-03-09T00:42:52.74055Z","times_seen":6,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd938c3d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194188, version 1.15139","md5":"654ba7fa32ccfd8c24e11f29b7156a34","sha1":"e793cfc8775a34158f6c2e2b9b4f8aa9dd3b42d4","sha256":"c2d36a5db423d0a4a5d3a8e16e65b1e5384e476cad41c41d3e3af2622cda5813","sha512":"77f1f87ee469d7786865a7224bc026e8eaf2dd5ba6d6bf6eb9716d68f80f2a0ad4d8961fca25dfd6c5797cd37f33fdef3e3162a99154aa9e5b103fcac6ca7057","ssdeep":"3072:2DB+LuV+P1oE5jssrK+hXI4LLYJwGDU5yFCmoBV+pFtUDLXyKcTkI6ocSJ5mmD0Q:2FsuVnds+iXI4XYiB7BgULXTcT1WSJ5H","tlshash":"dd14132c295b96e481d786a35b0d07d6cca750a5c8defd34576a7d42e1d8f0f830e328","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.603318Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629ad0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.565966Z","times_seen":846,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/8dbae49e1280328b442be6dfff163124.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42500\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629b70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42500,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42500, version 1.0","md5":"35a11f6a81a4fc01ba1480668513d5ef","sha1":"4a7d1f90180d7e2649fe5fa43d03c374285ecbb0","sha256":"6394ed8f516a766a09242489bed086da0abec3b608a02104e662abdb026c9d67","sha512":"649351d13701bc4505a3c2511ad6845a52054e7531df4aeffeb010885f0167438cb837ff144b09c45a8c76dd96a61ce3b382e09e04785c8f5e525fe0b244d849","ssdeep":"768:wsHVYoZfdNG2XlJeVdjICnsokinVFsRPvNC557ogFY491OibT2ZFn0Fl:XY61NG2XlUIZozHsRXNc7ocR910FKl","tlshash":"ef13f1b1f75c3b5da9c54fb5a13a6c4243f42b91c0fc0e6dab3a185e118918393e72a3","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.446229Z","times_seen":422,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 201132\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978cee0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201132,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 201132, version 1.15139","md5":"1da7b78b095470252a023e5943d6bfee","sha1":"826268dec35cbdb1c1d750f8578cfdad5e34ca15","sha256":"8af7572662b43186ff6cecd57be6c89af823350c12d790dfd0ef1458c2f62996","sha512":"9d6ad16afac668db116f011bcfda4e8e01ea66bd63b8f27a89c3b7f90dd120d156ea3ccb495e649fc273350f300d509afa6ceba55fe4f51b7ac4ede96998d0ab","ssdeep":"6144:Km/vYXMmxVh7iOE49yPV7WQJLgz8AUJefwEuriA:KiY8mxV409yPViuLgz8yRuJ","tlshash":"851422fad301c0494bc94ae8a20c7857b01c57db7a7695442dd867fc65fd0e8ceae0b9","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.437654Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978cf40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194188, version 1.15139","md5":"654ba7fa32ccfd8c24e11f29b7156a34","sha1":"e793cfc8775a34158f6c2e2b9b4f8aa9dd3b42d4","sha256":"c2d36a5db423d0a4a5d3a8e16e65b1e5384e476cad41c41d3e3af2622cda5813","sha512":"77f1f87ee469d7786865a7224bc026e8eaf2dd5ba6d6bf6eb9716d68f80f2a0ad4d8961fca25dfd6c5797cd37f33fdef3e3162a99154aa9e5b103fcac6ca7057","ssdeep":"3072:2DB+LuV+P1oE5jssrK+hXI4LLYJwGDU5yFCmoBV+pFtUDLXyKcTkI6ocSJ5mmD0Q:2FsuVnds+iXI4XYiB7BgULXTcT1WSJ5H","tlshash":"dd14132c295b96e481d786a35b0d07d6cca750a5c8defd34576a7d42e1d8f0f830e328","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.603318Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194064\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd938c480731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194064,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194064, version 1.15139","md5":"bd9b0e8c9f27308a42500f46cab0ba15","sha1":"ce426e13c100dc1d6c293cd3a121fa195763f32b","sha256":"aa9b3d1241d650c7eebe80b8a9d73450a685cad1942a4cec9c754a76ce716f1f","sha512":"c0b149e584b4e527ab79f1641147b8d99640043dd7f6d5ada34bddf49ef2a5d319df0822b3a67ba32b36b4c412cb99b99c40df9d396d51b39ecdb258501dc4eb","ssdeep":"3072:lWA1E2IS4CGxdgapuE7L/qeXwjxseq5IGxjgF3udAjWJp2r8YvVkhsHZUTV8KBfC:l1rIS4CG2EPPwjxsScjgF3ud5u6hsHZh","tlshash":"161412a09f0fd5476ea3fde30d479094079d3bb2953775a3a01b40bbc9b89a713a01b4","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.601848Z","times_seen":1146,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/4e4ccb7c43acbd67.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/4e4ccb7c43acbd67.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd94beb40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cfd85ffce1141819d8bef325d8454c71","sha1":"c1eacfaa7e046e4d47c6fa03126b93fa9058d055","sha256":"9d6f24efc0491e7cf7a592a8b0b2fbb9e857e2cea78cf900af2c49c2d380a7bf","sha512":"c7927c8026730d2fd018bed08d60d15589b309740b5150615db23d163952d62711b2b660eeee52a1baf6582645aa76b657f5a383f869387763747f624d4e3ce0","ssdeep":"","tlshash":"dce02b847546fd12209b34fa820f2b302667c0217829ddceb7715d7914f2808c396cb5","first_seen":"2025-03-03T18:23:23.559297Z","last_seen":"2026-03-09T00:42:52.706944Z","times_seen":5,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629b40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.565966Z","times_seen":846,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9639c90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.483062Z","times_seen":729,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9639d20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41456,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.483062Z","times_seen":729,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9209160731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-08-19T10:47:48.678611Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/b2158b2b2e5f1853.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/b2158b2b2e5f1853.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9239850731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (643)","md5":"3acb0594a30a6808b7166c7690887385","sha1":"d043496710aa925b7f8a106e93579443e51a1720","sha256":"a501e6f5bacd7aff1a974df4e7add93fbabce2a0b00111671257b32a0646c954","sha512":"57bacba14df68248480bf48fe336a569b98ed0a3e3d5e868aa86bb801769a6333a8ca5a94550bb7a7c78235607c8b9b566ab68db6434f0c52bbd8e6e6c97759f","ssdeep":"","tlshash":"58112f48b55bbe3300ab24b5812f192009b680a0b806a9ceb7f63df850f1408d725cb9","first_seen":"2025-03-04T01:27:46.729387Z","last_seen":"2026-03-09T00:42:52.699145Z","times_seen":5,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42876\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9639ce0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42876,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42876, version 1.0","md5":"8f4bec1ddf700ed07257978d5663a76d","sha1":"f620b74e20e57acad0a9cbc65b72c96567854587","sha256":"24f4213242badc483a9657e2a7bae4639f346b140f5c2e2a8e32c731fcb47381","sha512":"2e65284fd982d104621a8fc091c93b70d985e52cd2c607ce4e00a5f6d624a17aed63000e7f59dbb612224be06b9cd1ea07a004675e1ade7d1c6aa4cf26a48614","ssdeep":"768:TK+/ZcRK3EIVb0HyQd9gn69p2yMHOflBcOdKlPxM/klsSEp4WCAUTl6wTi1QrJnE:eKkK3EuQd6n6bxMHO9COdWxflsbCvTDO","tlshash":"aa1301d51847fd99e6d2a3ff33b7d5598b21ae450257ddb7ea0058a2c368e1380b80ec","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.459747Z","times_seen":411,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194064\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd979d240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194064,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194064, version 1.15139","md5":"bd9b0e8c9f27308a42500f46cab0ba15","sha1":"ce426e13c100dc1d6c293cd3a121fa195763f32b","sha256":"aa9b3d1241d650c7eebe80b8a9d73450a685cad1942a4cec9c754a76ce716f1f","sha512":"c0b149e584b4e527ab79f1641147b8d99640043dd7f6d5ada34bddf49ef2a5d319df0822b3a67ba32b36b4c412cb99b99c40df9d396d51b39ecdb258501dc4eb","ssdeep":"3072:lWA1E2IS4CGxdgapuE7L/qeXwjxseq5IGxjgF3udAjWJp2r8YvVkhsHZUTV8KBfC:l1rIS4CG2EPPwjxsScjgF3ud5u6hsHZh","tlshash":"161412a09f0fd5476ea3fde30d479094079d3bb2953775a3a01b40bbc9b89a713a01b4","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.601848Z","times_seen":1146,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 203232\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd97ad480731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203232,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 203232, version 1.15139","md5":"fc158c702f95747bd895cec9ee6c5749","sha1":"2e8ab4664a87ed3735dab1f1ca78e97796a7342d","sha256":"a944f637083a93abe190a1c53c2179d3da3e3f179f3debe076e1bcae375877d2","sha512":"8a882751bce35b582a9ae17ad92ff9420183774e38d70db0bfffd245ccd2306a506ea274578516c6dbc103ed0fd3e3a346a0f2304e48fb861563943dcba1f342","ssdeep":"3072:nlYBrCSeMS/Yyho1JFBxaAueqjVlPUKmLq+CS6DoJpIEYMbODMWrOdow4R:nlYBm8oYyC1LaAZAlsvRRpIEdcFr3NR","tlshash":"ae1423c3670284d946ea58320d4933fd86ead19785beb133c5ca98443eef732a6914fd","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.481675Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/880e6e552c388ec9.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/880e6e552c388ec9.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd89bd6d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1881985,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (568)","md5":"70e866e59cead5e66cd8e65d43a7f510","sha1":"36c44632e60fc09a7c7838af7e436fd8c3ee3fd3","sha256":"96a83fcd7f6840790e7a0e2836a255a8f29587b3d656777d543d5bf6222497aa","sha512":"354331a6a58edf3c75add1db972b007a874921560900a80f13f6fa62d5ff49c5811a1714bdbb0f03aa8dd0e832d47e68b797e702c172624c8bbf41469f194b2f","ssdeep":"24576:x8I3idvZv+Q6vht45HpXa6R/sPujpE2tayA33EMsUFFvuIBi/lOp3EoCmIbegxfD:n3idvZvyj45Hpa6R/sPujpE2tayA33Eb","tlshash":"3a253b8876e3b05a8223e8e6903f0046f83aad55f04c9cb8f59de9d57d14949627bf3c","first_seen":"2025-10-02T15:03:52.674983Z","last_seen":"2026-03-09T00:42:52.709271Z","times_seen":3,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/c69c23593c9bd5705c7780a200f2a6db.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/c69c23593c9bd5705c7780a200f2a6db.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41508\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd937c2f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41508, version 1.0","md5":"8a83d3ea2e60560ba77baec1cce6881a","sha1":"c1d1ae592ab0019c8092dabe56875a29d5745b80","sha256":"fb1992542fe041232eb0470ec651c97dac516d86bf11d659b542924307142dc9","sha512":"5c85f3c34dbc70fcc76ae45536ad1acc313e69d7a4df0e793f5037da64b230d24a53b730644e5e2cf43780bcd37c70286e32d67001a1eafe442d7450a6e44f54","ssdeep":"768:kEoxtkLck1fY9Ebj8/K0HJ5/LVrK1nTtzgu0hRuddFcALkukQubAaNp:gxtkAk+mbj8/19LVrKxJguyaYALknQul","tlshash":"761302f917225b37ee23d285e03c570e2762d4f81835d794aecf8ed232a93665803785","first_seen":"2023-09-26T21:42:42Z","last_seen":"2026-08-19T18:29:30.539034Z","times_seen":402,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/98c4d2c0223fc8474641c77f923528e9.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194064\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd97ad4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194064,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194064, version 1.15139","md5":"bd9b0e8c9f27308a42500f46cab0ba15","sha1":"ce426e13c100dc1d6c293cd3a121fa195763f32b","sha256":"aa9b3d1241d650c7eebe80b8a9d73450a685cad1942a4cec9c754a76ce716f1f","sha512":"c0b149e584b4e527ab79f1641147b8d99640043dd7f6d5ada34bddf49ef2a5d319df0822b3a67ba32b36b4c412cb99b99c40df9d396d51b39ecdb258501dc4eb","ssdeep":"3072:lWA1E2IS4CGxdgapuE7L/qeXwjxseq5IGxjgF3udAjWJp2r8YvVkhsHZUTV8KBfC:l1rIS4CG2EPPwjxsScjgF3ud5u6hsHZh","tlshash":"161412a09f0fd5476ea3fde30d479094079d3bb2953775a3a01b40bbc9b89a713a01b4","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.601848Z","times_seen":1146,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":62,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41456\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd937c1a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41456,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41456, version 1.0","md5":"4971edf7a4a0359f252d44d4647aa2c2","sha1":"b7a585910ed4af3810783f842aa0e39274b76396","sha256":"66c862243067d2ed17d8881a57f8593e0dd35a7488babb3b3335111a5d1e3591","sha512":"f7c69269d0636b08807b86f716a6d245cc4ad69a91c192208463f7adb9c6950fedb43a9ea0c77f1440c6787106b9e395bfd08ee0f5da983bb29dfc60fafeac59","ssdeep":"768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL","tlshash":"ce13f1e6a3a4f3d8c17aa170f489af4ab51534d5e1864c1b3c8ab97c0c487d076f56b1","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.483062Z","times_seen":729,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd937c1d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.565966Z","times_seen":846,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 201132\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd938c4c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201132,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 201132, version 1.15139","md5":"1da7b78b095470252a023e5943d6bfee","sha1":"826268dec35cbdb1c1d750f8578cfdad5e34ca15","sha256":"8af7572662b43186ff6cecd57be6c89af823350c12d790dfd0ef1458c2f62996","sha512":"9d6ad16afac668db116f011bcfda4e8e01ea66bd63b8f27a89c3b7f90dd120d156ea3ccb495e649fc273350f300d509afa6ceba55fe4f51b7ac4ede96998d0ab","ssdeep":"6144:Km/vYXMmxVh7iOE49yPV7WQJLgz8AUJefwEuriA:KiY8mxV409yPViuLgz8yRuJ","tlshash":"851422fad301c0494bc94ae8a20c7857b01c57db7a7695442dd867fc65fd0e8ceae0b9","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.437654Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/625cf32ea46ae48b58ebd3ff993de469.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42876\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd937c290731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42876,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42876, version 1.0","md5":"8f4bec1ddf700ed07257978d5663a76d","sha1":"f620b74e20e57acad0a9cbc65b72c96567854587","sha256":"24f4213242badc483a9657e2a7bae4639f346b140f5c2e2a8e32c731fcb47381","sha512":"2e65284fd982d104621a8fc091c93b70d985e52cd2c607ce4e00a5f6d624a17aed63000e7f59dbb612224be06b9cd1ea07a004675e1ade7d1c6aa4cf26a48614","ssdeep":"768:TK+/ZcRK3EIVb0HyQd9gn69p2yMHOflBcOdKlPxM/klsSEp4WCAUTl6wTi1QrJnE:eKkK3EuQd6n6bxMHO9COdWxflsbCvTDO","tlshash":"aa1301d51847fd99e6d2a3ff33b7d5598b21ae450257ddb7ea0058a2c368e1380b80ec","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.459747Z","times_seen":411,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/afaf5463e6f5ad33.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/afaf5463e6f5ad33.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd897cc249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148059,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a873d427e5ad808f897bae2bcd96e03a","sha1":"8d4ba00c2c569bb44b172041141ebc2b39149580","sha256":"90e32f0c88c693dbd2560f3ceab5104d2f11da3d5c8c36dbf97e30cf541177ad","sha512":"6ff64aee4bb79399b27252d4f6d37a1227ce835ad164e36fa0c4eff1216d3041707022be7b7f11d72e4354f2fccf298df65838dfad85d946f4c604a5ce2db307","ssdeep":"1536:XkbY9CqdkatKTJBBaanqYXdb69U7XO+BpQkUNGjX2SES:QY9VeBaanqYXnzFNkS","tlshash":"f3e32aa84a21b13cec3bf11267dd8a9c1179b111ee230bded666be2186c7ff505b4358","first_seen":"2025-04-07T22:43:42.239334Z","last_seen":"2026-03-09T00:42:52.738135Z","times_seen":4,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/static_font_4.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/static_font_4.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd897ccb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1446)","md5":"d1437e0251d431b3a3080cb68d66c610","sha1":"e40f425d2630e3d7c770d913457b1209b7b81327","sha256":"138b5385f644aacbff65a59c31cdd4f12856f422ebf852afb7477230e9e002c8","sha512":"31045fca87d9d8f7c5015713d8a1d74e6f179524727855c1d488a644133d876ea2e9bcec8ab1fd1d253b1cccafec599d743b5a402f727af6825a50673f8d5d5e","ssdeep":"","tlshash":"4131ac341419918ed862795334df76721f3e10256f88622bdf1c58944fabca6f150f9e","first_seen":"2024-08-20T09:48:06.054128Z","last_seen":"2026-08-19T10:47:48.642362Z","times_seen":2253,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/a1107a5a91a4c581.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/a1107a5a91a4c581.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9239870731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113939,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56396)","md5":"c93b79520c424a3e6220b5c61ff1bc7e","sha1":"c34f66ea220acb309449c64c72e9e8049b031dfd","sha256":"85b007e9bc3ef1f215059b513ebaa6ab55f9a2ab155fe84cc32ee19bdd8f8a94","sha512":"6576ad2b502d339bc63075420e5fd58fc6736b0373656a7f2b0f4f224ac90b4bcaf2ec9e37c8485b3fbb1ac0e4396eaf4100226b9dad4106ddb74c083ac4dda1","ssdeep":"768:63c5fB74v6ZO1n5DEM5Qp2S9+MDPucKBMirKpuRTaNCqXPGmRneYlUwqC6UZ1/V7:wc5f365cKBMirWhZlUpYSWluB8Ir6292","tlshash":"f1b3faaeebe768ad5352bc75c87ada9cb4df38b18010e2791f34885b5c2412fc85ed14","first_seen":"2025-03-04T01:27:46.717989Z","last_seen":"2026-03-09T00:42:52.715109Z","times_seen":5,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/images/b46630e470f4040eba7033cf2435edce.woff","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/_assets/afaf5463e6f5ad33.ltr.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1136\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9209280731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format, CFF, length 1136, version 1.0","md5":"b46630e470f4040eba7033cf2435edce","sha1":"ba26d2e1dc5bbc01a80446ac65bffb991953764a","sha256":"3e32aea52247a81c38b4735e84a28ba27b0cbc33f007a1d14e81e64ba766eadd","sha512":"eff809cc87517f9048f1c7a16561ef6f956ed0fe50b3382afaf111b6f159e769dd88af0dc0d8a03b748d407c5c554789b6148a137ac700f776a260fd153c0ae7","ssdeep":"","tlshash":"6321b6a2ea60c260dc4506707ae89bee732490ce2657be851e6b043bb48a304e380066","first_seen":"2023-04-08T14:15:10Z","last_seen":"2026-08-20T18:00:27.840022Z","times_seen":3489,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/d257a7100844bc3f98c9021168b6249e.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 201132\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978d110731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201132,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 201132, version 1.15139","md5":"1da7b78b095470252a023e5943d6bfee","sha1":"826268dec35cbdb1c1d750f8578cfdad5e34ca15","sha256":"8af7572662b43186ff6cecd57be6c89af823350c12d790dfd0ef1458c2f62996","sha512":"9d6ad16afac668db116f011bcfda4e8e01ea66bd63b8f27a89c3b7f90dd120d156ea3ccb495e649fc273350f300d509afa6ceba55fe4f51b7ac4ede96998d0ab","ssdeep":"6144:Km/vYXMmxVh7iOE49yPV7WQJLgz8AUJefwEuriA:KiY8mxV409yPViuLgz8yRuJ","tlshash":"851422fad301c0494bc94ae8a20c7857b01c57db7a7695442dd867fc65fd0e8ceae0b9","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.437654Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/1060345c54d396e76d73f1da7ee200bd.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 203232\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd97ad4e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203232,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 203232, version 1.15139","md5":"fc158c702f95747bd895cec9ee6c5749","sha1":"2e8ab4664a87ed3735dab1f1ca78e97796a7342d","sha256":"a944f637083a93abe190a1c53c2179d3da3e3f179f3debe076e1bcae375877d2","sha512":"8a882751bce35b582a9ae17ad92ff9420183774e38d70db0bfffd245ccd2306a506ea274578516c6dbc103ed0fd3e3a346a0f2304e48fb861563943dcba1f342","ssdeep":"3072:nlYBrCSeMS/Yyho1JFBxaAueqjVlPUKmLq+CS6DoJpIEYMbODMWrOdow4R:nlYBm8oYyC1LaAZAlsvRRpIEdcFr3NR","tlshash":"ae1423c3670284d946ea58320d4933fd86ead19785beb133c5ca98443eef732a6914fd","first_seen":"2023-05-25T17:07:36Z","last_seen":"2026-08-19T18:29:30.481675Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":67,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/5eb15c719412ac66.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:50.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/5eb15c719412ac66.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:50 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd9229480731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1013)","md5":"ceec31edb0423bf386b50df88b93a2a0","sha1":"637d0a472b9a5012ca1304bea2c11d185c997273","sha256":"71f46cae81ee6fb67acbc888b76090b6df52030e406188fe161fd36c9528b896","sha512":"566c61b9895062df58205654f091db826d0085363ffdac910d76524855a1a12d88c8185e8cf8f76edddac1d79442cd89ce03c9174960dc22e8bcfcc8aaea596d","ssdeep":"","tlshash":"1a11a0b43abfc03dfc16c4167b4c554d2056b313da8196a5e4e47466c5c23be0d7ca5e","first_seen":"2025-02-05T20:56:42.39797Z","last_seen":"2026-06-26T19:48:39.261864Z","times_seen":42,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40708\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd9629a70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40708, version 1.0","md5":"ffe7cc3945dcff0497df9901158ca5c9","sha1":"92b86140e39dc5b0ebaaf91ac3147f7ed7379851","sha256":"c856336c2c3439ef8a736b40a7b11a7e575979a739c96edf7baed2d1a5b131d8","sha512":"46c4ab2acac2269dccb459a04dbb5c959331ecaec9d75f79249909e9c6c1c2cb3ef1ff550cc5ab48c56e445fa84d4358789efddc94786cb8349d90bd79ce24d2","ssdeep":"768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO","tlshash":"3903f195fe79b63fbe0a416d0a41a0240f895b10e9be29c0f825507161fcb65f7a1c5b","first_seen":"2023-04-29T19:33:37Z","last_seen":"2026-08-19T18:29:30.565966Z","times_seen":846,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:51.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fonts/f8f199f09526f79e87644ed227e0f651.woff2 HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 194188\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d95fd978d0a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 194188, version 1.15139","md5":"654ba7fa32ccfd8c24e11f29b7156a34","sha1":"e793cfc8775a34158f6c2e2b9b4f8aa9dd3b42d4","sha256":"c2d36a5db423d0a4a5d3a8e16e65b1e5384e476cad41c41d3e3af2622cda5813","sha512":"77f1f87ee469d7786865a7224bc026e8eaf2dd5ba6d6bf6eb9716d68f80f2a0ad4d8961fca25dfd6c5797cd37f33fdef3e3162a99154aa9e5b103fcac6ca7057","ssdeep":"3072:2DB+LuV+P1oE5jssrK+hXI4LLYJwGDU5yFCmoBV+pFtUDLXyKcTkI6ocSJ5mmD0Q:2FsuVnds+iXI4XYiB7BgULXTcT1WSJ5H","tlshash":"dd14132c295b96e481d786a35b0d07d6cca750a5c8defd34576a7d42e1d8f0f830e328","first_seen":"2023-05-11T10:14:27Z","last_seen":"2026-08-19T18:29:30.603318Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/a0684b0780c739e9.vendor.ltr.css","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/a0684b0780c739e9.vendor.ltr.css HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd897cbe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10099)","md5":"4eb0cc037aa215c5fa2eb3c1b342613d","sha1":"97d135c19209077c0335065f35d53fffc62caa88","sha256":"e8fb139770ec251e750403322d40db96c027b9feb48f4489b76a735f9f0869e5","sha512":"270302a621dd93de4ca144dab5f699270b2dcde0e759fbd63098b09d2c597cf9a07827b8caf40343e38d3108c8cbf1edef6af44e6944fa0bd99d8467a5d2dd56","ssdeep":"192:FFS+oMcpO2BMKGwLsreI0keXg6moYyfJWh:S+oMz2BMKGwLsreI0keXg6moYkQ","tlshash":"9022af6a3f57307f8393857ff042aae150c9e396a0e98515f0a5ef0429db4e5921af3c","first_seen":"2024-04-10T03:14:53Z","last_seen":"2026-07-11T23:33:12.679341Z","times_seen":2487,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/178e2329cbbc6c59.strings.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/178e2329cbbc6c59.strings.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd897cce49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11199)","md5":"47fb9805c5037991ae202aca2665ea33","sha1":"ac2359ea2403feff0b8fc1e841eba97b814f2988","sha256":"22fb94a266e947bb3ed3a2af56c45f11f15c244b2b6e95428910d0a697ead663","sha512":"cb6a619170c8373607c351ee7effe54a3826139d3c8a4ebee9e330762f803285418e03e109456852b27f858008a87892250555d0f58b20b882b8d5366ecd331a","ssdeep":"192:bIoUhdnBcatxFxVFCT8CpZNXsAbYT58vaKhW5j1HVy57kFCEIICLRY8eZY:b7UhvcaBxVCXsAeSvHc11H8ZFEIICt","tlshash":"2b32d609e641c22cc6514e8e17beaee1f55bc1a997a01375fc99c068d35783c3bb78d4","first_seen":"2026-03-09T00:37:21.453712Z","last_seen":"2026-03-09T00:42:52.72526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-phantom-live-zh-hk.my.canva.site/_assets/90e8fbddbd415f91.en-GB.js","fqdn":"wallet-phantom-live-zh-hk.my.canva.site","domain":"wallet-phantom-live-zh-hk.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.250","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet-phantom-live-zh-hk.my.canva.site/","date":"2026-03-09T00:33:49.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/90e8fbddbd415f91.en-GB.js HTTP/1.1\r\nHost: wallet-phantom-live-zh-hk.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-phantom-live-zh-hk.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=LXrYSW2I..qDokuS85cSPDxDQqvblHPxasnN3P8CucE-1773016428.674025-1.0.1.1-ALrlut5bCntifCZKSRVcKjo5.urNWB5SkohN4OTjZxSadKdGnpgKl.8iJ78d_pFNhgIYgg1OS_4fniEje.IUKDXlcCyIUD6oGeFDqqvvx8Gm4AEwUPaJO6z82QwIjLZU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 00:33:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 8ad2b48df076177b8dad16993be58aa3a66635fd3f5d7bb3eb38cb1c917e833a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d95fd898cd049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f90706809ad062326396455ebfaa9199","sha1":"7626ceb96515c5481332e7006d81d0cce66b2175","sha256":"e9ebeb44d8dd83c12bc940028dbf7dedea96896d8f851b24c499d3f795f9ed66","sha512":"f1c733760be47f9724729fbfbc66bbc9ce5405d4c047299fec870b9a4d49895c744526968d061ebd7adae937919255f4b700f5cc5a667c038f2ac9c96a304e6e","ssdeep":"","tlshash":"45d05b5600d56794bf770fecd36a25c51c3103141452d5ac4872015137f5c5bcae0094","first_seen":"2026-03-09T00:37:21.456277Z","last_seen":"2026-03-09T00:42:52.719135Z","times_seen":2,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"wallet-phantom-live-zh-hk.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}