{"report_id":"d8dfa04c-8312-4b54-9ce4-71e0e2535272","version":6,"status":"done","tags":[],"date":"2026-03-26T12:16:09Z","url":{"schema":"https","addr":"phaexnt.info/wal/","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phaexnt.info/wal/","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"title":"Wallet","dom":{"size":49065,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16508)","md5":"586342957318567eab3315907800a251","sha1":"4435a60794ea2ccc0f3fd91fcd56b788ba8e2691","sha256":"4a6cb296378f6bad90f1cc6004b1a3a000b2a4311c913c1adc7b990a102badac","sha512":"d47b1f367d44f8648e64870888bdf57189e1ab3636b7e0a217f3d0e624992d13b46e6621fcac63c89ac20e7a4f3e92b2feae79ffde3027ceed6acd124576bfc4","ssdeep":"768:k7lKrouJZdypbXdaVSqR8jGV19eriFThDXGKUNX9auLuo0sC7:keB5ypjdARQGV1LThDXGKQ9auLs","tlshash":"db23d672b2960566371f47af8053731ca19cee95da46e6f6f0f5202845e4ef321e370a","dom_hash":"domhash261c9e5da6c450f9590f4f3f7f91e67d","first_seen":"2026-03-26T12:16:14.585229Z","last_seen":"2026-03-26T12:16:14.585229Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phaexnt.info/wal/","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T12:16:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"phaexnt.info","ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-26T12:16:10.167232Z","last_seen":"2026-03-26T12:16:10.167232Z","alert_count":31,"request_count":31,"received_data":1317698,"sent_data":15154,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.30.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Yoast SEO:27.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T14:49:16.337032Z","times_seen":926942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T14:44:41.269396Z","times_seen":203902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T14:44:41.249477Z","times_seen":200839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T14:49:16.328696Z","times_seen":340114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1729e5f3ed23b6781e4b88a336ebff3a","sha1":"c1e8e0e91d28183b9c3ac67baac6c38f514d106b","sha256":"67e390e3ccd4903c7fce52d3031de0c7ac78431819fa7d47adfefefeafdfa5a2","sha512":"a99cafbc4a805388da309f949770a7026f45500a6bb4e9d4e1cf7250b6abace47a720d6d8e13839cc5359c69ecac4913c089b7823b30c66934fe6bedfb161cb6","ssdeep":"768:nRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:nRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"08e209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","size":32876,"data":"","first_seen":"2025-07-22T15:49:24.306423Z","last_seen":"2026-08-09T06:15:25.666099Z","times_seen":3069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd9dfabfa2ce491dde7596d9f2ea3b4f","sha1":"7560230d2a1c73f13f0250e839fbc3d8eead3fde","sha256":"05b11dfc2b0c1507d3f8d191e99d493dd33fc44fb2de82132aa1c7e0a0d0c1cc","sha512":"38b7f41853f0679839557917f92e592830bcc988503ef376668db7ee79d4ae00f15b67967fe0edcd6e354f880f7261c719377576e6bbf918adef8c2a757fc8f3","ssdeep":"1536:B8WOaWbzhwMhU1naVPhEhcHqke/YPEMCEsZBywqIQm6YIzH+ajwb4UX8ulaij86j:IobxTpVNlx7rLmVR32","tlshash":"10d3d7523052a8b646cf50abb417020db7221dadb403b4aeb9fd8cdb9674dc63376376","size":134630,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:27.038286Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/wp-block-template-skip-link-js-after","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8884ab4ed21eb0cb381c03f82fd71fae","sha1":"72a52da39c5e879355d1de415ca31d8c07c23cc1","sha256":"83842f19f1aa66c08e318f22788de8553df9a2ad89efde81774a4fa8817c3fd5","sha512":"c701a4461fb1ea93e6061cb66bbabc89ab1d084d98e86c2c1d2029906a2da1b641f4cf8fac80fd6b2d94f0607dfbd24d6b90d6c815f2783e8e4a464e987622c4","ssdeep":"","tlshash":"802195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1366,"data":"","first_seen":"2026-03-26T12:16:14.631153Z","last_seen":"2026-05-07T01:16:17.406095Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d34a31c190be8bdf335fa0c44ef52699","sha1":"483e1b4ba88b6e7ca8153871811e32cab021d6e4","sha256":"f032f0b942ea9f4bd771ddb2262c518e948328a305a5268dacc74f3eee364514","sha512":"867865608f99f5c9fecf0a583e3434df06bae7beb5c5a6f2c24655f6030ec93e1c238ab934ec269601741ed122a483931ff719c84a1e8eded8c943c75fcf7a58","ssdeep":"96:B+NxGhQa+dLKhOvVU69GfWg+tDre1MlwiGVSLUVccxjefbfBbb0BL8k2:wN6QvLKhOvVUhWgSDrVGcQHxa4ok2","tlshash":"ceb133950654ed2b36e139d5b05b6b701a3ed0337c16aa81fa11edec19ecfc043ea532","size":5184,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:26.996524Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-09T14:44:38.01274Z","times_seen":217971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3120f503a07296ec70c204ac4f02b93","sha1":"bc4e010d9496099695d3a8c201fca0464e322177","sha256":"4db7f8317e6c69c1c393671a9ef8faa76ad4a8d8a8c8c426a5d0f9e2d90d7d97","sha512":"1864b40fa1c7c0ae304c9fa84c0a06c8cd92c18118a91efe1f98efc53ac8b3c7d4cb437e00c73ee85aa6010e402cb7be4e8a94150070c5e5a5731df19f3730b8","ssdeep":"768:2eAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:2eAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"bc23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","size":48393,"data":"","first_seen":"2025-07-22T15:49:24.337517Z","last_seen":"2026-08-08T12:06:01.076812Z","times_seen":3069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3292c1b42af288c371c5411c4253f18","sha1":"a563f69f9ef58e0304bbfcc783b12ab21fd4d401","sha256":"b00cbc0ab0a8a635ebeaf832cc1e0775145b3775e617ede3c1e45f19681ffcba","sha512":"72c49665eff145a54ebf4545f6d77342eefb2222e00f4161313a4aa9270717e81c525f666a0d5fcc00e292bd635f56cfe58b1e82dc106a67a70ddff029436f1b","ssdeep":"384:biIdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOzQYqEbzGP:biIdndptaQ9HuGJswyV/pkTAQYtDT6Hb","tlshash":"02a2b9063153987a64cfc157e0a7420e7b334895740570ed7abc6cdba9b8d9a33ea335","size":21417,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:27.084973Z","times_seen":1169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0f3fc40f1b7f58d82c9740731ca578f","sha1":"dfc17df4a4b13b3fe48dee6f9d1df40c93f51ba2","sha256":"d9613ca5b87c4548286424b2df29da0b689c4ef5db1ceab3ef3abb01d7310e6a","sha512":"9ff1c886c900d93a5354427f98abdfb785761854bfde3ec393ae86bde101e64219b234a62886b1f70790fbb859b8954b346162f0ec2391fd02c4ae7d21f29e62","ssdeep":"","tlshash":"d7f09eb970d338ff140f04820a97101de5d81cf5412520417ebd44383a74fa4b23539e","size":489,"data":"","first_seen":"2025-07-22T15:49:24.349223Z","last_seen":"2026-08-09T06:15:25.664644Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8516e1abe34afada26c662bab66f61b6","sha1":"5743609cc75f4826f61b3637056fff91ee41b147","sha256":"7c7064750c149fcc96e0a855b2be5e80b89cee5eafcda135fbe035ec0c1bc1e2","sha512":"34e94ced05b0c6b760739ce13288c31c4d4f743c627aeb17acfc8909683e557c6674dbb2fe04527fc6018e92283eed9e50db5cf86b0f677fd7f00f8f59d955cd","ssdeep":"192:AwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPoj:zHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"c402210a74c1942db58b58ba3532432c66a8014de1018f6db1bf79fb85a6d82377b7f1","size":8541,"data":"","first_seen":"2025-07-22T15:49:24.313045Z","last_seen":"2026-08-09T06:15:25.641228Z","times_seen":3189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e419e77b7d10e0c0aaa242bb11d9b19","sha1":"6a5c86ad22a9685fc739a1cf2a6e41444e2d55b6","sha256":"75c9c014178fd157c4ff9f8cfd9067fc30d2d8432c729504e9a75f7aa8bb6123","sha512":"3c0baef186cf851218a8c23f4c6a4dc3adc0527e7fb916e0c274b5a811b55c93129089db4fdd1b707a066f637d8bf73378ffba75a3a40bcb5091bd5f3c16d5b5","ssdeep":"96:BrAtsNvDdfzjqj3Nhxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:+sNpzjq33NQWg+smeMs5QTY1V/2","tlshash":"24c172d41a94fc2b22e135d8e10b9734662fc0337c16f9c1fa21dce955e8ed183aa532","size":5700,"data":"","first_seen":"2025-07-22T15:49:24.312063Z","last_seen":"2026-08-08T12:06:01.069198Z","times_seen":3065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T14:49:16.34329Z","times_seen":1011724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/elementor-frontend-js-before","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"80e162a2c149e9d5caf827b8b34fe153","sha1":"b4e44aeff434f6109b49e163e7e95c00601cd39f","sha256":"a2f9ac61f73229fa33dc19d17a202fe9bcc64f02d019213c98ffa897bd8cb518","sha512":"41759e599d84bca54775b6b07bf7cc6c2601c246791b4b256baa6b2dc784418960ab1d129a73736d834a6fa10464381ba67d790e2761b5de99511b87aa81c6f8","ssdeep":"","tlshash":"41517221f9055fbf83e3cbb13a17ba06687c0925d041b9a8f4bc486d14b6e743607e57","size":2810,"data":"","first_seen":"2026-03-26T12:16:14.633716Z","last_seen":"2026-03-26T12:16:14.633716Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/wp-i18n-js-after","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce358668e245a6dd6eaa9d2a85addd78","sha1":"d37e9a718d33abeb64d3cf712a22d3e390211db7","sha256":"03ac04638e8ca49cd76885de536511f5d24a6f8e25b059e378bfcdad3111418f","sha512":"5348b557965e40fed8d55cc6395f238b5a84e62a63c7c2df22222545d74e6a2bb1815f7c6444948dc38899c1f192685fc4ba2e8701711c4359c1a38777b1e64f","ssdeep":"","tlshash":"5ce012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":419,"data":"","first_seen":"2025-12-10T04:28:19.925011Z","last_seen":"2026-08-06T00:18:41.004598Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T14:36:50.220618Z","times_seen":310722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/elementor-pro-frontend-js-before","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"802b9e69041b323bbdc51ebb3c367c65","sha1":"ede97c5a0aaee372bdd1c6efe928aab4c1aade43","sha256":"a61d1aa4e77516d2fbe327c6233be59f539466d529e265fa71b6a848c7a8731f","sha512":"e531875ffdf2ae1d1a639f0eac65871ae252f126a3aa2d96355eba213879c27a961b45f81c1c846ead33a55637644e7c0b61508ec96e75cff3e548b9fafa2916","ssdeep":"","tlshash":"3b31af5aea220f2457aee7f971c73aaf48d00732e5d4b00d168ad0a001f3ddde1992a3","size":1520,"data":"","first_seen":"2026-03-26T12:16:14.636355Z","last_seen":"2026-03-26T12:16:14.636355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/wp-emoji-loader.min.js","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0d96494e2786ba35fbcc250d40bb593","sha1":"d3da192c3920c3c5995865bf535d44f665e16117","sha256":"b40ba4f8298effa112e6fc7644485f6d5846d2857ef3dc41a7269da9fdc59ffa","sha512":"3ac981fe25713d28013b072ff65220fbf3696e3d277a5797e4dd7e353439bdc253adca03896607a1bfd384952aaa66c3d1aeee201cfeafb900d2bcca4e07b6fe","ssdeep":"","tlshash":"a661969ae77638dbb2f900f2697a0d47eb614435d6c8d038c9bda3141cb5893c274a46","size":3298,"data":"","first_seen":"2026-03-26T12:16:14.637825Z","last_seen":"2026-03-26T12:16:14.637825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:48.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 297\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"f0f3fc40f1b7f58d82c9740731ca578f","sha1":"dfc17df4a4b13b3fe48dee6f9d1df40c93f51ba2","sha256":"d9613ca5b87c4548286424b2df29da0b689c4ef5db1ceab3ef3abb01d7310e6a","sha512":"9ff1c886c900d93a5354427f98abdfb785761854bfde3ec393ae86bde101e64219b234a62886b1f70790fbb859b8954b346162f0ec2391fd02c4ae7d21f29e62","ssdeep":"","tlshash":"d7f09eb970d338ff140f04820a97101de5d81cf5412520417ebd44383a74fa4b23539e","first_seen":"2025-07-22T15:49:24.349223Z","last_seen":"2026-08-09T06:15:25.664644Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wal/","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T12:15:46.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wal/ HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: nginx/1.25.5\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 13826\r\nlink: \u003chttps://phaexnt.info/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://phaexnt.info/wp-json/wp/v2/pages/28\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://phaexnt.info/?p=28\u003e; rel=shortlink\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.30.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Yoast SEO:27.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":48879,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16508), with CRLF, LF line terminators","md5":"bda0dd157a3f0afea4663d37fc6a0c79","sha1":"4e4571225f2a94843281ccd69ca1f486467a6986","sha256":"b3b825de2fb37a85ace67617c5b1259871e2ee83c9d0ab524fc947e479b0e8f4","sha512":"6be2f21dffba7d271cae1064d9afa931c3b75711f8f2a126fe1b7695db4fc4f82bf735d9e1788c902f0fc603101c2c0f7d9eee4695a627ca36b658f96c390baf","ssdeep":"768:98lKXKgJZdypbhdmVS8XO8GV19eriFTxiDXGKUNX9au3Uuo0sC/:9dl5yptdOXzGV1LTxiDXGKQ9au3Us","tlshash":"8f23d632b2950566371f47af8053771ca19cee99d646e6b6f0f5202845e4ef322f370a","first_seen":"2026-03-26T12:16:14.58933Z","last_seen":"2026-03-26T12:16:14.58933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":299,"dns":16,"connect":139,"send":0,"wait":544,"receive":136,"ssl":149},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 09 Jun 2023 00:19:24 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5422\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T14:49:16.337032Z","times_seen":926942,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":48393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48352)","md5":"f3120f503a07296ec70c204ac4f02b93","sha1":"bc4e010d9496099695d3a8c201fca0464e322177","sha256":"4db7f8317e6c69c1c393671a9ef8faa76ad4a8d8a8c8c426a5d0f9e2d90d7d97","sha512":"1864b40fa1c7c0ae304c9fa84c0a06c8cd92c18118a91efe1f98efc53ac8b3c7d4cb437e00c73ee85aa6010e402cb7be4e8a94150070c5e5a5731df19f3730b8","ssdeep":"768:2eAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:2eAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"bc23c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce19470e8e237ab74","first_seen":"2025-07-22T15:49:24.337517Z","last_seen":"2026-08-08T12:06:01.076812Z","times_seen":3069,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.7 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:01:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":481137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65493)","md5":"c40987277a40fe245862d29877746415","sha1":"3a447a8465853842351b08b3a63adf2b201c7deb","sha256":"802372f788e1d164af80a0f26260fcf9d6e88218ab450c014d5eaf44fda7d0e3","sha512":"e650b61af939e42f88d256aaf8a08d75c01ffc7da809d6f848104c8c8a519d97b614fc751d719bbbf2987fac6d7c797b38fef2f4384e5262411d72bcf0d0099f","ssdeep":"3072:xXptFzSq0xM0mz0h/cNzyS2MJGhsAsochVen+jtUdhvNlC6lREWlmR8VDOViG593:xXptFsrSDf7qQh/","tlshash":"d6a461a7bc13152462bf641b9287a6cc3a50c5d4a54316edfca22a0b4bfbce5733171e","first_seen":"2023-04-05T05:36:55Z","last_seen":"2026-08-09T07:46:27.001177Z","times_seen":595,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1774337330","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1774337330 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:50 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":103194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"c6728db44f5aa53e43b9cc2e62b4717f","sha1":"5b205de9bfce7457859c1565dd488bbd552d7a4f","sha256":"481148c9fe5e24106d664ed7dae0c389bf3638ed64710ed7d9f092a00f9b5032","sha512":"67472daf353bb2e8c7cc754611543d4b8a7d2a47c01f53b7d43e30e11b31c5f51c45357f711ddc2e71f1cc56c74a6b189d5e8d581545b299bc180c76e675a0ae","ssdeep":"768:yd9AtABUKbHLdc807QSohcg0PImSZiHnY4RLuWZpdqbDdMHt1ub3Vg2:E1mj8xaPgvCDI5u/ElB","tlshash":"93a33262000b1101639758d323de7e28fe0ed2457188d075a7fc5bafeee6db512a935e","first_seen":"2026-03-26T12:16:14.594771Z","last_seen":"2026-03-26T12:16:14.594771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2657\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5660)","md5":"6e419e77b7d10e0c0aaa242bb11d9b19","sha1":"6a5c86ad22a9685fc739a1cf2a6e41444e2d55b6","sha256":"75c9c014178fd157c4ff9f8cfd9067fc30d2d8432c729504e9a75f7aa8bb6123","sha512":"3c0baef186cf851218a8c23f4c6a4dc3adc0527e7fb916e0c274b5a811b55c93129089db4fdd1b707a066f637d8bf73378ffba75a3a40bcb5091bd5f3c16d5b5","ssdeep":"96:BrAtsNvDdfzjqj3Nhxl8O7AEQQ1vg+lsmejl3i7wVjLUVsc+2KBbZ7Qah88/2:+sNpzjq33NQWg+smeMs5QTY1V/2","tlshash":"24c172d41a94fc2b22e135d8e10b9734662fc0337c16f9c1fa21dce955e8ed183aa532","first_seen":"2025-07-22T15:49:24.312063Z","last_seen":"2026-08-08T12:06:01.069198Z","times_seen":3065,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 06 Feb 2025 11:57:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8375\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T14:49:16.328696Z","times_seen":340114,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 13613\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32836)","md5":"1729e5f3ed23b6781e4b88a336ebff3a","sha1":"c1e8e0e91d28183b9c3ac67baac6c38f514d106b","sha256":"67e390e3ccd4903c7fce52d3031de0c7ac78431819fa7d47adfefefeafdfa5a2","sha512":"a99cafbc4a805388da309f949770a7026f45500a6bb4e9d4e1cf7250b6abace47a720d6d8e13839cc5359c69ecac4913c089b7823b30c66934fe6bedfb161cb6","ssdeep":"768:nRdRMtJR8RjDKv//DQl5ZnfVgbpM+MpKEAzBc5GlTSeUsveOBNU5aG9g3fWLJhoh:nRdCtJR8RjD8/0fVliEAzBc5UTSeUsGa","tlshash":"08e209527296d4a2069f48a3f0331119f3765dd9b80af0d8b2acdce1a475f877361b35","first_seen":"2025-07-22T15:49:24.306423Z","last_seen":"2026-08-09T06:15:25.666099Z","times_seen":3069,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 21 Oct 2025 01:44:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2014\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T14:44:41.269396Z","times_seen":203902,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 28 Oct 2024 18:32:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53600\r\nvary: Accept-Encoding,User-Agent\r\ncontent-type: font/woff2\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-08-09T13:45:11.90357Z","times_seen":12488,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 365\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793)","md5":"42ba4338149cb822931cd65d8705ed8d","sha1":"fde90a0344b9f2a9d4bdda48308d31e4d3546a3d","sha256":"7dc8717d37624b91664cebd2a64305726de9f6d97b848ed4c397048c56841c80","sha512":"7cd42f065bb8a6d0653e8624b59415ba3f7780dcb160257031c3f2cd953e041748e6e38ed8853df55fbc68f4fe1f18afc421276c21e4e96375d792ccac729bf3","ssdeep":"","tlshash":"3c311650bd07662cb87fa60f8413129c658494dee581ccc6daa1f60aa2fcee33336935","first_seen":"2025-07-22T15:49:24.350033Z","last_seen":"2026-08-07T03:02:00.195526Z","times_seen":965,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/css/post-28.css?ver=1774337325","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-28.css?ver=1774337325 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:45 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1210\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6165,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6165), with no line terminators","md5":"dac9a7a20e93969d9d91e197e7b1fa75","sha1":"578db775802a2918ee5a115088ef343b492f1b31","sha256":"80808faf3547f88890cec08980468bbda44440d9f1a5d8d60d33451625338f4c","sha512":"9ec65857a3c65a93227e0cfa681e96fe811c54b5e3ba44aa9e2a5dcc8124254ff21d44d9e06cd9579191499bb045821afa6629851fc62cfda19abc92b8953bd8","ssdeep":"192:Z0YE+H0I+uZuz0UiO2MdON9qTqCPGHkW0Ai0IsK:HOGEX","tlshash":"a6d1379b3c434129706f629f2423e69c21284ccdd03db7eaf5256267f0bbd5533a2e92","first_seen":"2026-03-26T12:16:14.606114Z","last_seen":"2026-03-26T12:16:14.606114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1774337332","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1774337332 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:52 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3454\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5731d288426ede87be9167f5f0cc0b94","sha1":"67f953a91f96336a11989787d47557224e4d6bbd","sha256":"610cb744fff43f4424195bf3894b9ec9d22fc37161c8cfb8b415b5e99065c0ac","sha512":"2a25064781fb593659329569e7796a75d4b3f2fa78e84603f1e34467290412890cadd8916b46a0feaf731e3c2c41ec9f6a02c791c427caefad39ecd9528e4218","ssdeep":"384:bdjLdDdydfwdkdRdsjcUvf9pynjXvUfa21CjyKtf/TcFj1tKfk4XojYwrfxVWDjH:bdPdDdydodkdRdsIUvVpynjvUS21CGKB","tlshash":"3ca2fe91505b150163930cc673da3f24d94da08ab0c9d5ea5ffd18ecadf7e2122a279f","first_seen":"2026-03-26T12:16:14.608288Z","last_seen":"2026-03-26T12:16:14.608288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/2026/03/phantuu-1024x222.png","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/phantuu-1024x222.png HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11950\r\ncontent-type: image/png\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 222, 8-bit colormap, non-interlaced","md5":"d8b3cc4ca1524b8b8970cd1b550b22fb","sha1":"2a5bb2cdc4987e5bd2e8c3bedea9c9861b1c6d49","sha256":"84530fc827080bcbf7e453f15ddf185b9c1aad97c12851a190fcf3eb18e9f41f","sha512":"9eadefb345d2fd46457ed670e07a3258b3ae613a7162cc798a7b5917437b7a6cfa665e8ce93d615282950871ab38e81305c903a7ccefcaa3a0673b5cf88ffdd2","ssdeep":"192:lsprbULVPAK/eu2TWr0qh0Yu4IyJB7bd1YyIdMhkhrSp49zBhD:61bULlDRcWr0qeYu6BH0yPCh7HhD","tlshash":"2a32b0c6e143d17ec54c9b310e6885050d6f73687b2a0b165a9b4bbba74681bcd25c98","first_seen":"2026-03-22T20:01:43.473596Z","last_seen":"2026-08-06T02:44:58.512443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:48.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 07 Nov 2025 09:14:34 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5657\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T14:36:50.220618Z","times_seen":310722,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:48.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.30dc2f9c080845a413a6.bundle.min.js HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3173\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8501)","md5":"8516e1abe34afada26c662bab66f61b6","sha1":"5743609cc75f4826f61b3637056fff91ee41b147","sha256":"7c7064750c149fcc96e0a855b2be5e80b89cee5eafcda135fbe035ec0c1bc1e2","sha512":"34e94ced05b0c6b760739ce13288c31c4d4f743c627aeb17acfc8909683e557c6674dbb2fe04527fc6018e92283eed9e50db5cf86b0f677fd7f00f8f59d955cd","ssdeep":"192:AwfFpzqxODoWV5KxZmdXLf+UvDZ5CMtakRhPZTxcMkCwB410QsFfpRHvcwxDnPoj:zHzqxORV5KxodXLfpvD/NtakRhPZTxcg","tlshash":"c402210a74c1942db58b58ba3532432c66a8014de1018f6db1bf79fb85a6d82377b7f1","first_seen":"2025-07-22T15:49:24.313045Z","last_seen":"2026-08-09T06:15:25.641228Z","times_seen":3189,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/2026/03/apple-touch-icon-2.png","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:48.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/apple-touch-icon-2.png HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:09:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1883\r\ncontent-type: image/png\r\ndate: Thu, 26 Mar 2026 12:15:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"7020527513f6a9b092646fbcb42564e0","sha1":"8571bfacf94b758a4c5fc209d4b9597ec35214fb","sha256":"89f587dbf01af7fe391e6b9d7fe59dc0d616ee065504090e4802cdac174d9fe5","sha512":"f4e2d2933960d5fc5d7f6b49598966251ba515506ece094b92fbb62f8e96de11be246d0c74d31ba6ae1d36d9bd7698cdfaea70943f064433dd953b29fb83a63d","ssdeep":"","tlshash":"27415fd0421679bfb407bd7a4ed936dd17cd6050487cd5bc5058f8c147eb4276384943","first_seen":"2026-03-22T12:48:24.606825Z","last_seen":"2026-03-26T12:19:27.873887Z","times_seen":6,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 164\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2448272a337dabe2d1e4763ca0ac0da5","sha1":"b6af47916d7a905a2612d41ac402fe39fb22b6b7","sha256":"361e951df6ab08602597fa0baa9a4b8bd0047a210709358b2887b53e26d6ed21","sha512":"afa5c352e123e6d0ab28c9944a0fee2911fe1cd8c7926867339efdcf4c65fbfdb6edb26050ba842c10b58b026d8a56b9a59a0cee6361a00a4fa818e40bb7e4e7","ssdeep":"","tlshash":"c0d05e4078674382301f596926ab2a9e78c01ddce246cb90eca166125abacc83372120","first_seen":"2025-07-22T15:49:24.314015Z","last_seen":"2026-08-08T12:06:01.093916Z","times_seen":2623,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:01:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7577\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21374)","md5":"d3292c1b42af288c371c5411c4253f18","sha1":"a563f69f9ef58e0304bbfcc783b12ab21fd4d401","sha256":"b00cbc0ab0a8a635ebeaf832cc1e0775145b3775e617ede3c1e45f19681ffcba","sha512":"72c49665eff145a54ebf4545f6d77342eefb2222e00f4161313a4aa9270717e81c525f666a0d5fcc00e292bd635f56cfe58b1e82dc106a67a70ddff029436f1b","ssdeep":"384:biIdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOzQYqEbzGP:biIdndptaQ9HuGJswyV/pkTAQYtDT6Hb","tlshash":"02a2b9063153987a64cfc157e0a7420e7b334895740570ed7abc6cdba9b8d9a33ea335","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:27.084973Z","times_seen":1169,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1774337330\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43136\r\nvary: Accept-Encoding,User-Agent\r\ncontent-type: font/woff2\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T14:50:00.045559Z","times_seen":258120,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1774337330\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43136\r\nvary: Accept-Encoding,User-Agent\r\ncontent-type: font/woff2\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T14:50:00.045559Z","times_seen":258120,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 188\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"4abe5306992b2aa7d3894d8c5d52dae3","sha1":"12896b131f4c06ee3d8d7ea20a8fb748d6d53ad5","sha256":"91dd81854d40609d55bdf833f1381e5d650442654e07ee9a8c307caa96d7dc07","sha512":"d852da87e75f62fbb186705974dc20f3b21b103a7a6edb64727e5b63d6f1edfb5113e94a66249ccd2c95c3f966825a47851471aa463d7ba0d164aa4eac7ae15d","ssdeep":"","tlshash":"40f012237e4b94aa783f195b1183377c74944ecc93a0a8d8f8fa91436df4ca27330622","first_seen":"2025-07-22T15:49:24.37025Z","last_seen":"2026-08-07T03:02:00.170457Z","times_seen":2638,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 28 Aug 2023 11:44:24 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T14:49:16.34329Z","times_seen":1011724,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:04:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1033\r\ncontent-type: image/png\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1033,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 304 x 216, 4-bit colormap, non-interlaced","md5":"fbb52f87816a4993b60b28f298d9cd75","sha1":"eccfbec71d7811fced0ee94af53f34649574a86b","sha256":"5b842909785bec731b24e7900462034ab9796d2ba380c9970673e9bd909f0d74","sha512":"00a4dec0b271793f5dbbbb2470cea487db322648a96d66c08de9a4cd5a653f916e120b6f0ea505eb192d6fc7ee30a72ee764f78c947079bdcd9e85a092279de8","ssdeep":"","tlshash":"4911a88f2f810617e9faa00e17e0776d924503d819677002db9d977c9599374709553d","first_seen":"2026-03-22T20:01:43.486164Z","last_seen":"2026-08-06T02:44:58.508114Z","times_seen":14,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:01:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2451\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5141)","md5":"d34a31c190be8bdf335fa0c44ef52699","sha1":"483e1b4ba88b6e7ca8153871811e32cab021d6e4","sha256":"f032f0b942ea9f4bd771ddb2262c518e948328a305a5268dacc74f3eee364514","sha512":"867865608f99f5c9fecf0a583e3434df06bae7beb5c5a6f2c24655f6030ec93e1c238ab934ec269601741ed122a483931ff719c84a1e8eded8c943c75fcf7a58","ssdeep":"96:B+NxGhQa+dLKhOvVU69GfWg+tDre1MlwiGVSLUVccxjefbfBbb0BL8k2:wN6QvLKhOvVUhWgSDrVGcQHxa4ok2","tlshash":"ceb133950654ed2b36e139d5b05b6b701a3ed0337c16aa81fa11edec19ecfc043ea532","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:26.996524Z","times_seen":1164,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 23 Mar 2026 18:01:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":134630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"fd9dfabfa2ce491dde7596d9f2ea3b4f","sha1":"7560230d2a1c73f13f0250e839fbc3d8eead3fde","sha256":"05b11dfc2b0c1507d3f8d191e99d493dd33fc44fb2de82132aa1c7e0a0d0c1cc","sha512":"38b7f41853f0679839557917f92e592830bcc988503ef376668db7ee79d4ae00f15b67967fe0edcd6e354f880f7261c719377576e6bbf918adef8c2a757fc8f3","ssdeep":"1536:B8WOaWbzhwMhU1naVPhEhcHqke/YPEMCEsZBywqIQm6YIzH+ajwb4UX8ulaij86j:IobxTpVNlx7rLmVR32","tlshash":"10d3d7523052a8b646cf50abb417020db7221dadb403b4aeb9fd8cdb9674dc63376376","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T07:46:27.038286Z","times_seen":588,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.43.0","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.43.0 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4412\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21172)","md5":"f059008c0fd67da941f3f30806045d5e","sha1":"b3219e8f2bd604d59a0a0ad2686114ca6ac616bc","sha256":"8cc9ca750735b87b3efe85f8fd9fdd44ad2b908bdd3744812abaebfe055771a4","sha512":"77ca8022702e3ffc66112a3cff3f6f1b62f679ac393fe6a12617a87e4d538bfbd8d539a32b51b2ef57a170d1af34129c38a9e0ebe3b7f9f90475d741c28e5a6e","ssdeep":"192:Fx9877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSN:i7iNyqEpSk8/aq8uFucbrgIYu","tlshash":"3092dae4e46923c87b32c413e744f64c64daf920cac99d19fa6f850c1de16a31686fb8","first_seen":"2025-06-26T04:56:06.540185Z","last_seen":"2026-08-09T12:34:52.898965Z","times_seen":11506,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.30.3","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.30.3 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:22:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 9936\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53422,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53382)","md5":"06a6d551bd028bc6f7f502df263b9865","sha1":"c001dffab2e05e1ccd5b3c55ef1b46e7fe0e3336","sha256":"d876e3ee79d2b31d34ffa94ad3b3798624bb56b82404251ae6bc59b430d451b0","sha512":"52f10986856f96e84d9efdc6de34e575ef2feb854cae1d62bc6f7def8e7f6d9325331f737d32b157a3774bc7bd8929518a75e7a389b833b51786f82fa8a144e6","ssdeep":"384:zvrJ9/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCLldlRaE2ksFrOk:HLRdL2t7RrlNX7skk","tlshash":"7633fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-07-22T15:49:24.346982Z","last_seen":"2026-08-08T12:06:01.08174Z","times_seen":2731,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-content/uploads/elementor/css/post-8.css?ver=1774337325","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1774337325 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:28:45 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 405\r\ncontent-type: text/css\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1225), with no line terminators","md5":"46b0d660f8eed73aee006f153adbb414","sha1":"16c3e86b7161098203cf6d5dce98de818b0440e5","sha256":"bf4ce1bb45eddf623a700ea87747c85062748c49a6184cb519ee8fb5b95d88e0","sha512":"106c47eed9034369d4742063d7b2f9c33329874a9fffa70a311ea477bbb715326a387219a345424a796e968d649232429d8b2e82bee6bf371e5460f1155c810c","ssdeep":"","tlshash":"f02136457a23d432e07b092f91c3b02c112cd85fa25f8adff41d9649f9bea4a2228643","first_seen":"2024-12-26T13:52:54.087622Z","last_seen":"2026-08-09T07:44:20.619127Z","times_seen":769,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phaexnt.info/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"phaexnt.info","domain":"phaexnt.info","tld":"info"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phaexnt.info/wal/","date":"2026-03-26T12:15:47.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phaexnt.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:46:59 GMT","end":"Sun, 21 Jun 2026 16:46:58 GMT"},"fingerprint":{"sha1":"61:60:EB:91:F0:B8:89:17:34:F6:2C:1E:EE:92:57:97:20:9D:27:5B","sha256":"E5:DE:F1:B6:CA:59:0B:84:00:9B:B4:DD:AC:77:64:6E:55:16:40:53:CE:94:1B:23:24:D4:C1:73:00:2B:BD:40"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: phaexnt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phaexnt.info/wal/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 21 Oct 2025 01:44:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2319\r\ncontent-type: application/javascript\r\ndate: Thu, 26 Mar 2026 12:15:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T14:44:41.249477Z","times_seen":200839,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"phaexnt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
