{"report_id":"ac29c669-d9c5-4b67-b043-0a540e9f31c9","version":0,"status":"done","tags":[],"date":"2026-08-04T01:17:48Z","url":{"schema":"http","addr":"phantomm-wallet.gr.com/","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":0,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"title":"Phantom Wallet | Extension Download | Official Site","dom":{"size":67868,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20709)","md5":"561efbc1e08341042f5f1aa8dad099c7","sha1":"92a44dd6e2d23656bb4a2b3661744875713ca811","sha256":"960f7abf76bf85b6adb09df680ada22518fd7f2f7a24f85fa0146d3ead26002e","sha512":"6309ccb6614b0bf4e0a2077494b85ad78e307c550a7fcfb9c691a758bdd1fe51ae6499950318b6d3fa6d448cdcf27923791cb91cd3fa3d43a31f9f9b4092afa9","ssdeep":"1536:LoOcmRiBmgT0cTrnbO27kD5yp4nT8WKZobXemlUVuXwam3AeYiAad:LoOcmRiBmgT0cTrnbO27kD0SKZobXemu","tlshash":"a16366a197b448f5797f833b9e44a2185227e902c50977e5f0f3d294758cfa216e3b0b","dom_hash":"domhash57bf3894be5519b4f3278b09d841f088","first_seen":"2026-08-04T01:05:46.163688Z","last_seen":"2026-08-04T01:17:50.167294Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phantomm-wallet.gr.com/","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":0,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T01:17:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"phantomm-wallet.gr.com","ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"domain_registered":"2026-08-03","domain_rank":0,"first_seen":"2026-08-04T01:05:43.046065Z","last_seen":"2026-08-04T01:05:43.046065Z","alert_count":1,"request_count":11,"received_data":371166,"sent_data":5607,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.7","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c24c075b5d13603ce9b31c1b8730649","sha1":"cf2289ef95b18549e80cf294c6a694879337dc63","sha256":"3830fb6ee9f5cf53898585b7d4a5f50e0e081e15c12e55c1a0c8eadaee013457","sha512":"dae231b2f8bace3dd92f4386c8a6077a0d01b6412d475596c3a7156e0a8115382facf420f34ff07e157e8d25ff83c9a3acc289b0faf99b1628fe8d40a7897cab","ssdeep":"96:dO0ZHQsJcjtwkHY3xY7kj65HULuHfDbyWt8+IQnjRrZE7m12u0gc/q:o0lQYcjtwk43xY7k708+3tZIhu0a","tlshash":"96e19316f73c158b2073016ee8c9b1c53c2f54b7c6190da6fd6624bca8acd907726b5b","size":6942,"data":"","first_seen":"2026-06-06T15:59:52.813857Z","last_seen":"2026-08-11T10:04:26.111986Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"076971b5b506e644cecb3b76eeb92654","sha1":"d9f9e772cb073770b8953a10b557b2bbd13265e7","sha256":"a3522ad97cbc1da9fe8b88a519aaee9b2c6f6ddd2421c98d91027196df341cbb","sha512":"6e2e7bb2c48bc391b848b54d8f35fa645dbe17acfb9c15685b4b1d7571716ba257c9e8fb21635daab2c19ebf506551e45426dcb6d1a1eecd59215ba347157bd7","ssdeep":"","tlshash":"da61869ae7763cdfb2fa00f2697a0d47eb614435d6c8d438c9bea3141cb5893c274a46","size":3243,"data":"","first_seen":"2026-08-04T01:05:46.17859Z","last_seen":"2026-08-04T01:17:50.174705Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-08-11T11:55:34.308738Z","times_seen":8774,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-11T12:53:36.632234Z","times_seen":30685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/formlayer-frontend-js-extra","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b0853738bdf4f89363c3c8ea4212f9","sha1":"0b84c0c740753344b05a22d4b61a14c7bf6543c7","sha256":"bae0b90add040a181e6c793e85a39843fcdf089b3a2b3f755aedf6e830aeb58b","sha512":"06e959bfe6ee816385d6468888716fce5f65a57adf2293f44e3348e3e6d4c17ee50235be1b1c5bebee835e16bc7f90ef8328683832b10f94dc9e5768110b05d6","ssdeep":"","tlshash":"17e08055dccc4f4755739df448b0637761567461e2a19c81f75eb48411bcec39954203","size":429,"data":"","first_seen":"2026-08-04T01:05:46.180289Z","last_seen":"2026-08-04T01:17:50.175473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","size":3053,"data":"","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-08-11T11:55:34.293506Z","times_seen":7988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://phantomm-wallet.gr.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.7","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.061Z","timestamp":1785806242061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.7 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2156\r\nlast-modified: Thu, 04 Jun 2026 12:31:32 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6942,"size_decoded":2486,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3c24c075b5d13603ce9b31c1b8730649","sha1":"cf2289ef95b18549e80cf294c6a694879337dc63","sha256":"3830fb6ee9f5cf53898585b7d4a5f50e0e081e15c12e55c1a0c8eadaee013457","sha512":"dae231b2f8bace3dd92f4386c8a6077a0d01b6412d475596c3a7156e0a8115382facf420f34ff07e157e8d25ff83c9a3acc289b0faf99b1628fe8d40a7897cab","ssdeep":"96:dO0ZHQsJcjtwkHY3xY7kj65HULuHfDbyWt8+IQnjRrZE7m12u0gc/q:o0lQYcjtwk43xY7k708+3tZIhu0a","tlshash":"96e19316f73c158b2073016ee8c9b1c53c2f54b7c6190da6fd6624bca8acd907726b5b","first_seen":"2026-06-06T15:59:52.813857Z","last_seen":"2026-08-11T10:04:26.111986Z","times_seen":207,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/favicon.ico","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.607Z","timestamp":1785806242607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":1013,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/css/dashicons.min.css?ver=7.0.2","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.050Z","timestamp":1785806242050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0.2 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 35101\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Aug 2026 01:17:22 GMT\r\nlast-modified: Mon, 24 Nov 2025 18:47:30 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":59004,"size_decoded":35504,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-08-11T12:56:45.680521Z","times_seen":67296,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-content/plugins/formlayer/assets/css/frontend.css?ver=1.0.7","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.055Z","timestamp":1785806242055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-content/plugins/formlayer/assets/css/frontend.css?ver=1.0.7 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 2657\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Aug 2026 01:17:22 GMT\r\nlast-modified: Tue, 26 May 2026 07:08:54 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11374,"size_decoded":3059,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"147fd94775dbd836cfc58615860cd002","sha1":"48b8ed61ca861a3bc5079880453109a2e366749e","sha256":"53fcbda67196662a87a0caf8afccb1221e97804bca5b62951b5e80ee57c7820f","sha512":"311ace0db94a75a2b457f8c35967beb82d4416f13ea0535804977669b0aa316bdbee10d8e77a262be191ae84020a2caea8e8acc414c3d2e8ea1e79ff78a8c71c","ssdeep":"192:EWaPkSnfLFZAU477FkvxBZzO0/WXVx0koLqYE:VaPpIV7FC/WphYE","tlshash":"6632231b26242906a12bd5a4e4c6f7d23d2f8212c23f1de8f291799cb3ce1a64535f5f","first_seen":"2026-05-20T05:18:40.256108Z","last_seen":"2026-08-11T10:04:26.148074Z","times_seen":246,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.057Z","timestamp":1785806242057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30075,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.417Z","timestamp":1785806242417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14887\r\nlast-modified: Tue, 19 May 2026 14:30:48 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40106,"size_decoded":15218,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-08-11T11:55:34.308738Z","times_seen":8774,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-04","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.425Z","timestamp":1785806242425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 999\r\nlast-modified: Tue, 10 Mar 2026 11:29:34 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3053,"size_decoded":1328,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-08-11T11:55:34.293506Z","times_seen":7988,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.437Z","timestamp":1785806242437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53600\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Aug 2026 01:17:22 GMT\r\nlast-modified: Tue, 29 Oct 2024 00:02:18 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":53600,"size_decoded":53960,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-08-11T10:32:55.77138Z","times_seen":12517,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.719Z","timestamp":1785806242719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4974\r\nlast-modified: Fri, 05 Jun 2026 08:15:42 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22752,"size_decoded":5482,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-11T12:53:36.632234Z","times_seen":30685,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T01:17:20.825Z","timestamp":1785806240825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.4.23\r\nlink: \u003chttps://phantomm-wallet.gr.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://phantomm-wallet.gr.com/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://phantomm-wallet.gr.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":67818,"size_decoded":13087,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20709)","md5":"8296c3a09dd102fca766b65dcc98c1ab","sha1":"454d2475a2f0c6e03cfe709819df0569464b7053","sha256":"e00b411e6cb16f01ea2c1ee6315e517fc3b9f44277e26038f22e82fb540e5da5","sha512":"1371efc34255ba18de38db2f2cf632cffef4ec207764631dc6252bebe982e3de772df9929d9fc757f0ce0c298a370bc8d8583a2e8653658b098af871359f60d2","ssdeep":"1536:KoOcmRiBmgT0cTrnbO27kD5yp4nT8kHZMpm4wvSAIXuTVWAeYiAah:KoOcmRiBmgT0cTrnbO27kD0gHZMpm4wi","tlshash":"f76366a197b448f5797f833b9e44a2285227e902c50977e5f0f3d294758cfa216e3b0b","first_seen":"2026-08-04T01:05:46.173951Z","last_seen":"2026-08-04T01:17:50.173659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":78,"connect":162,"send":0,"wait":537,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomm-wallet.gr.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phantomm-wallet.gr.com","domain":"phantomm-wallet.gr.com","tld":"gr.com"},"ip":{"addr":"207.207.210.163","port":443,"asn":10823,"as":"NETCARRIER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomm-wallet.gr.com/","date":"2026-08-04T01:17:22.059Z","timestamp":1785806242059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomm-wallet.gr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 22:33:46 GMT","end":"Sun, 01 Nov 2026 22:33:45 GMT"},"fingerprint":{"sha1":"EB:A2:7B:75:C5:55:A8:EA:B6:2E:40:50:27:6E:0F:15:20:01:90:A4","sha256":"9B:D4:2E:CE:F5:A2:13:C3:F8:72:1E:E9:11:E9:5A:95:B2:F0:4E:92:10:59:B9:42:A8:CC:0D:E9:ED:02:4F:5B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: phantomm-wallet.gr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomm-wallet.gr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 04 Aug 2026 01:17:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache: BYPASS\r\nx-service: pixie-cpanel\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5008,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}