{"report_id":"c692c859-1947-42ad-a816-151c1ff293ad","version":6,"status":"done","tags":[],"date":"2026-02-28T12:03:14Z","url":{"schema":"http","addr":"fhantomwllt.us","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fhantomwllt.us/","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"title":"Phantom Wallet - Download Your Phantom Wallet - Phantom","dom":{"size":98883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21472)","md5":"dc539b393c688c76afe27ff6b39d3216","sha1":"30974d926b4f70f902752bf41bdbe40772cfbf33","sha256":"415fb51f7f80c407cc4919eafdb79c6724f5a4e0508e908c4b308b5f20dc22a7","sha512":"e5beb970e1974e8901e3cf27794b3028acb1b4b2dcd059d73966889d7af16bbbc46b673d81465fa0415a308f303776a897c433fbdd67fab40b7fc656b627d846","ssdeep":"3072:Hq10rRKxhdw2MZobEemlUVugamSg8vCP19:2bdwtZobEemlUVugamsg","tlshash":"79a3d9b2f36080b63e9b877a5489732c591af301ce0667e6b0f4911955da6fb01f7b0e","dom_hash":"domhashfb43f954cf2cdab0ddf0932cd54b3675","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fhantomwllt.us","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T12:03:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fhantomwllt.us","ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-28T12:03:14.743385Z","last_seen":"2026-02-28T12:03:14.743385Z","alert_count":11,"request_count":11,"received_data":335122,"sent_data":5311,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"sanity-proxy-v2.phantom.app","ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-21","domain_rank":119374,"first_seen":"2023-08-04T20:40:01Z","last_seen":"2026-02-20T13:22:25.251977Z","alert_count":0,"request_count":3,"received_data":1677799,"sent_data":2264,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fhantomwllt.us/wp-block-template-skip-link-js-after","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e005bdb01b5625f0736297bac5e88f","sha1":"aa47d0591bbaa31b92d5e89889a93cb412e08b37","sha256":"23a49f26570d41efd91e3d61c5f8214adb20c1ba50efb0ce3218c27e3216c109","sha512":"41b64a20ff873fbfe7faaf8cdab644d577bc55446f8be17628d6d45577194be85ffc21c574ddf032a1fc2ad9511014d54379040ee91684dbf25d95bb0be760d1","ssdeep":"","tlshash":"973195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1620,"data":"","first_seen":"2025-12-21T05:34:13.829712Z","last_seen":"2026-05-05T00:26:25.763939Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","size":2030,"data":"","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-05-03T14:31:43.513432Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-06-07T23:49:23.793188Z","times_seen":11267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/wp-emoji-loader.min.js","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"93f9a5f67aa6fef021d87f65a4c0a61a","sha1":"5e2ef4299da277238a943348fdfe2946f53869c5","sha256":"c55764527bf000b400634e36750cdb6f1531aa57bb07fef72dc5e5ba52f4fb8c","sha512":"96b078478cede88ad0268ec28e92de3da77c7a2277b52551764ce02e888c80d1344aa5028787e08edc0c532d5e26777d4685eda4c1c4f9c59c2692351726c482","ssdeep":"","tlshash":"0c71869ae7763cdbb2fa00f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":3534,"data":"","first_seen":"2026-02-28T12:03:18.965634Z","last_seen":"2026-02-28T12:24:48.867202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-06-07T23:49:23.848426Z","times_seen":5213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-08T01:32:09.392917Z","times_seen":262614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fhantomwllt.us/","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T12:02:52.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://fhantomwllt.us/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://fhantomwllt.us/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://fhantomwllt.us/\u003e; rel=shortlink\r\ncache-control: public, max-age=0\r\nexpires: Sat, 28 Feb 2026 12:02:52 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 28 Feb 2026 12:02:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98784,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21373)","md5":"a2b928935a3725dd9597231729ca38e8","sha1":"2cc89724a9b3ad70eb48e90ce420dec939e6a0ce","sha256":"5fc53a45b27a8a81dd6ecff449062a10e25b8cea550c50ac3cf2287a52a40572","sha512":"103aafe63eb077e563d98b8583dcb56ecfd8a6257d990db95d4ed1a1a7d945906c83d15960d990b9b5cfa6464c7ff7e6a02f3697fb79812c122624a7575b3288","ssdeep":"3072:8qqK7RKGTdzxzZMpj4wvSAIeTVvg8vCP1B:Ymdz1ZMpj4wvSAIeTV5g","tlshash":"32a3d872f36080b63e9b877a5489732c591ef301ce0666e6b0f4911959da6fb01f7b0e","first_seen":"2026-02-28T12:03:18.940875Z","last_seen":"2026-02-28T12:24:48.85676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":311,"dns":94,"connect":105,"send":0,"wait":402,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/blocks/navigation/style.min.css?ver=6.9.1","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 07:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2085\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-06-07T23:49:23.802478Z","times_seen":3058,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/js/animation.js?ver=1.4 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 07 Feb 2026 05:15:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 613\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2030,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-05-03T14:31:43.513432Z","times_seen":44,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/themes/acai/assets/css/animation.min.css?ver=1.4","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/animation.min.css?ver=1.4 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 05:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 577\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6369), with no line terminators","md5":"6462d2876635d3e792dacdf1c71715df","sha1":"ff9c64d6cc5f38efe38383ecb08d705db2c39ced","sha256":"2a66b20e06ff739787385b42a7b126bc38152ad2ac915852b34e09ad4963bf5c","sha512":"8f41b28d3cc938de0d5ad13cda3bb6ce32fa2fc44dad992fd0710a625f6f1faa976c44ad60d50a20dc5fab8a87f63bc7207f96684a9fb7defa0d49dcb805aebf","ssdeep":"192:Grpow3SesABfoxNT0qt1xxqLP7X7Xr/beNFRR1dhhd6iFnl7R79jhT6rV75bFrxd:0x","tlshash":"d7d1a4d356ac942983430f37084ee0894c77ef725906b699bf6d106d0ab8d7c176b3a7","first_seen":"2025-07-28T22:31:59.401112Z","last_seen":"2026-05-03T14:31:43.526234Z","times_seen":43,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:26:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1057\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-06-07T23:49:23.793188Z","times_seen":11267,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Jan 2026 23:37:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14617\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-06-07T23:49:23.848426Z","times_seen":5213,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":100,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 Nov 2025 14:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-08T01:32:09.392917Z","times_seen":262614,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 05:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 196\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496), with no line terminators","md5":"ff772ecff2c1d287b5d32a690afbb831","sha1":"3892a8ead03d51a7b71a1b94b49dcdca190bcf8d","sha256":"0ce47fb70ee0869662c3850871303aee6322469d5aa74b1c5645836e81dba031","sha512":"ba10564ffbc052443520fe888df34152133ddeec67e4bad86dbe389c579e4b166c599ec0331690ff5c5d09265067734fa066da30ead93c4a22120f9203aeecf5","ssdeep":"","tlshash":"e2f0e2040fe889f831dbc23c986942e1a44c3021e5ab1bde822ce4a4621a74d08a7b17","first_seen":"2025-07-28T22:31:59.389001Z","last_seen":"2026-05-03T14:31:43.519761Z","times_seen":42,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/uploads/2026/02/PhantomDownload-1-1024x500.jpg","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/PhantomDownload-1-1024x500.jpg HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 08:38:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49463\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x500, components 3","md5":"a5da77b8375409521dbf4bf33d2c3a18","sha1":"ef2c002f23e94b0724bd3fe46cc9b3376bfc96f2","sha256":"657eab363254f42f055ffacde73bdbd5b740f846e8f9ee36e4db9eace5121205","sha512":"8583fc533788b4e200f7bf56aa04cc87a91b7eb2da3a77eea5022b3be7af408bc815f8d82fe0334fe43d6c5f35c061eb54ec4aad002805cad17c9d26f2f32f9b","ssdeep":"768:sFg4WIoGj/FT7YJfnUVCPjGnILwkcpe4Utg/kb89LUp9IsdV4NwDzF:sFi1G7R8Jv0G/Lwqk9LOOszs0F","tlshash":"53235b178d15c7c3a92987e9be471e7d5f1b6b18e1417aeb10368dcf6d242652c8e03c","first_seen":"2026-02-28T12:03:18.952538Z","last_seen":"2026-02-28T12:24:48.859037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"phantom.app","tld":"app"},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 17:20:11 GMT","end":"Thu, 21 May 2026 18:20:07 GMT"},"fingerprint":{"sha1":"9F:80:B4:EC:BD:38:A6:E7:07:9B:0B:5D:2A:C1:E0:6D:4B:BA:82:B7","sha256":"8F:AC:EF:22:4E:1A:C5:6F:A2:57:FA:B7:E2:A1:80:7E:EA:CD:A4:48:83:B3:AB:EC:0D:FC:5D:77:75:42:42:38"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7208263\r\nserver: cloudflare\r\ncontent-range: bytes 0-7208262/7208263\r\ncf-ray: 9d4fc68afc6b5fac-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\nset-cookie: __cf_bm=XlkDe5zQSR8EOnI330b93LbBfuNyApRn3obeAUnXz0Y-1772280173-1.0.1.1-0Bi1T_PmXvkaag9ErHatN_Y7t.zuuRHH6F1OXCfyUO.geu9JlB8wbEZzKBux2mGG3PIsKRRdmtuPXC_9dzsgZfoqI5fgD4aEyNmMgQ_zeic; path=/; expires=Sat, 28-Feb-26 12:32:53 GMT; domain=.phantom.app; HttpOnly; Secure; SameSite=None\n_cfuvid=UyxkhL2KhDNS3oQRU4vH28iUB8QVsszF6BIK2cXT5oA-1772280173408-0.0.1.1-604800000; path=/; domain=.phantom.app; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"412a06b655f2ca21dd9e1b6b0fb129ce","sha1":"bd5eaec75c7fe9acd8340f7d37065a9a0af9dcd7","sha256":"cbe30b1b2bc9c19ee59db32ca685e515004bfae2dcbbb97c67de03a9f703df20","sha512":"4499d245c74a5e1787bf7945eca14e3ceb703a7d1d03b07781ab5c7b1fffef51774da49d3cafd1a8762221a99a91f43073f44d0a9766d503414af47a801d4d04","ssdeep":"24576:YDbr22M6Zs+5kDP00fh/EaZOKF3OrClGFDMmcQoskxQcg:e22M6ZZetEq+mAF4mcQolXg","tlshash":"9a2533978dbf1b66ddd026fc65b4210c22329093661213f3cba625ad10feca95f55dc3","first_seen":"2026-02-07T12:53:12.376276Z","last_seen":"2026-04-17T07:36:34.506799Z","times_seen":7,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":42,"dns":7,"connect":1,"send":0,"wait":137,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/wp-content/themes/acai/assets/fonts/instrument-sans.woff2","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/fonts/instrument-sans.woff2 HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 28 Feb 2027 12:02:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 07 Feb 2026 05:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88476\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88476, version 1.0","md5":"1a10a9b26020185af43c81002ac33316","sha1":"183eaeb794357a1c80af8cc64b280298e03e08cf","sha256":"8d93e0761b10a433a72768b15bcf1bd293b7b20b9c74d8299fda3cec0b6e59fc","sha512":"71d59f963017e925f46018000fdb94e6ce06c300ab9444deb92d4cf7d3fcb9ab23aa7bf6d3a305e3ea50771c5ffbb688e2801b16a571e30431acf8c57f7a47da","ssdeep":"1536:6ZaXrkHvhjY/AVOBfyaNlc/4SmjLJNCoh403fXKdeuPbmmcn6fGmPwpSLF:6w7chj0J5W4SmH/4yXMjmAfbrx","tlshash":"248312d3f9f5e310d932ac29eb354db63b5339327a9bc49adc120506139fae880d6e00","first_seen":"2023-12-05T15:08:09Z","last_seen":"2026-06-07T07:43:18.865903Z","times_seen":152,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"phantom.app","tld":"app"},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 17:20:11 GMT","end":"Thu, 21 May 2026 18:20:07 GMT"},"fingerprint":{"sha1":"9F:80:B4:EC:BD:38:A6:E7:07:9B:0B:5D:2A:C1:E0:6D:4B:BA:82:B7","sha256":"8F:AC:EF:22:4E:1A:C5:6F:A2:57:FA:B7:E2:A1:80:7E:EA:CD:A4:48:83:B3:AB:EC:0D:FC:5D:77:75:42:42:38"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7176192-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nCookie: __cf_bm=XlkDe5zQSR8EOnI330b93LbBfuNyApRn3obeAUnXz0Y-1772280173-1.0.1.1-0Bi1T_PmXvkaag9ErHatN_Y7t.zuuRHH6F1OXCfyUO.geu9JlB8wbEZzKBux2mGG3PIsKRRdmtuPXC_9dzsgZfoqI5fgD4aEyNmMgQ_zeic; _cfuvid=UyxkhL2KhDNS3oQRU4vH28iUB8QVsszF6BIK2cXT5oA-1772280173408-0.0.1.1-604800000\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 32071\r\nserver: cloudflare\r\ncontent-range: bytes 7176192-7208262/7208263\r\ncf-ray: 9d4fc68d4d624c11-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":32071,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"e49691a04c0f459a39ba70a8c6fdc371","sha1":"d4df30c0dd61a3e87fdbb62be57e23183b9f35e6","sha256":"75015706ddd5d1cf6a2d5638ab1ad396ac2b8843901d0aeb5f250cf4f108bdc5","sha512":"992642317bb1c0327b8d32c0eab0a65b87a4b010eba1040b9465821dcb55bb50680783cdaed2303f6d6a82c3eee25ca632cd57ee77d89a07b08b384829391bf7","ssdeep":"768:IyfPDWunJGu3BGFqHqHfgG8AfNpp0qYCZSsrVV:IyDBJAX/gFAf1lxpV","tlshash":"25e2bf96cbb6566bc96402381af3a3107338da2d7fbf071ba7a1d139fc257492d03648","first_seen":"2026-02-07T12:53:12.400418Z","last_seen":"2026-04-17T07:36:34.515549Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fhantomwllt.us/favicon.ico","fqdn":"fhantomwllt.us","domain":"fhantomwllt.us","tld":"us"},"ip":{"addr":"38.97.40.99","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.fhantomwllt.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 17:14:56 GMT","end":"Thu, 07 May 2026 17:14:55 GMT"},"fingerprint":{"sha1":"0E:43:48:9D:6E:76:8A:7D:47:0A:CF:AB:81:2A:25:95:2E:AE:5A:8A","sha256":"88:8F:96:D3:B8:18:3F:E6:BE:A5:73:84:27:12:15:E8:70:C6:9D:FA:FB:91:A1:DA:EC:34:2B:06:7F:D6:8A:C4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fhantomwllt.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-08T01:34:44.716435Z","times_seen":132496,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"fhantomwllt.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sanity-proxy-v2.phantom.app/files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4#t=0.1","fqdn":"sanity-proxy-v2.phantom.app","domain":"phantom.app","tld":"app"},"ip":{"addr":"104.18.35.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fhantomwllt.us/","date":"2026-02-28T12:02:53.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sanity-proxy-v2.phantom.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 17:20:11 GMT","end":"Thu, 21 May 2026 18:20:07 GMT"},"fingerprint":{"sha1":"9F:80:B4:EC:BD:38:A6:E7:07:9B:0B:5D:2A:C1:E0:6D:4B:BA:82:B7","sha256":"8F:AC:EF:22:4E:1A:C5:6F:A2:57:FA:B7:E2:A1:80:7E:EA:CD:A4:48:83:B3:AB:EC:0D:FC:5D:77:75:42:42:38"}}},"request":{"raw":"GET /files/3nm6d03a/production/38c2333eba4d9d1fad29f95be26fa039f35806bb.mp4 HTTP/1.1\r\nHost: sanity-proxy-v2.phantom.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=131072-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fhantomwllt.us/\r\nCookie: __cf_bm=XlkDe5zQSR8EOnI330b93LbBfuNyApRn3obeAUnXz0Y-1772280173-1.0.1.1-0Bi1T_PmXvkaag9ErHatN_Y7t.zuuRHH6F1OXCfyUO.geu9JlB8wbEZzKBux2mGG3PIsKRRdmtuPXC_9dzsgZfoqI5fgD4aEyNmMgQ_zeic; _cfuvid=UyxkhL2KhDNS3oQRU4vH28iUB8QVsszF6BIK2cXT5oA-1772280173408-0.0.1.1-604800000\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 28 Feb 2026 12:02:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7077191\r\nserver: cloudflare\r\ncontent-range: bytes 131072-7208262/7208263\r\ncf-ray: 9d4fc68de8eb4c11-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-disposition: inline;filename=\"homepage-reel-banner-20260121-60%.mp4\"\r\netag: \"0d28055aa066b4467fb824fa97bcfb38\"\r\nlast-modified: Mon, 02 Feb 2026 12:17:38 GMT\r\nvary: origin, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\napicdn-cache-control: public, max-age=31536000, s-maxage=2592000\r\ncontent-security-policy: default-src 'none';\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nx-robots-tag: noindex, nofollow\r\nx-sanity-age: 0\r\nx-sanity-md5: 0d28055aa066b4467fb824fa97bcfb38\r\nx-sanity-storage-adapter: gcs-default\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69743,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"ed0cb27d22bf3f1dc882692f23499f0e","sha1":"e0dbe1290779f9b60c76674df9fd1e0ac18762e5","sha256":"f903bb4a031c4cc155aa234f46793181abe26fc2495dc1f30449513c33397379","sha512":"1d90cc1c7f5d35331de103c77b2a04c7c5d379b51fd765cf4716f37e25a0a7009b79c80e519d6dc4ec892a635311af8295c2621d0ec5b308f580f550df33e95a","ssdeep":"1536:e7bRI7VYJq3ZQFO4dtHDLXsy0lTqvsyuAhBGuogwQ72anA2jRk:MI7Vz3GtHDLXh5uicJzt","tlshash":"8f6302c1f3172e1bdd4e81e3f4a032581c3a47176d9a24a143a627fd96e46346b2bfc6","first_seen":"2026-02-28T12:03:18.961394Z","last_seen":"2026-02-28T12:03:18.961394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}