{"report_id":"fb4e2923-2f8c-44ed-8314-b19c2f537e34","version":0,"status":"done","tags":[],"date":"2026-09-22T21:24:02Z","url":{"schema":"http","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"title":"web3phantom","dom":{"size":5859,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1269)","md5":"7acc824b84790c030e1c3c02bb6a0a57","sha1":"f48b1939db680d80192b3322097f0a2a82bc02b5","sha256":"a8a94d8d2978aeb0ee0b82a90a9d887e2810647daed3ad7a1d87771992b3ad0f","sha512":"f43f08c1cb2f38a5e13448f321fed47dc46ce6195192d8b0157236947c179a3ff8c1718068c00b6049f905f5a9b8bd3e6aa8cc410ed0cbc7d29584d04cca1594","ssdeep":"96:er8/e3HprCugOKFpQgK/sM/HRr6TCZydHRH/9C2mUsGKYiwwG0VPNdB1nPEPH7PP:etAGgTaZCxfA2nf/zb+dB1nYbY5fw","tlshash":"a9c1a5b7bda4c52b03634227eae7b4046ea2a202c009582079cd91ed4fe0fe6c8d7774","dom_hash":"domhash666681cdfc282ac1c5b9dfc28ede4419","first_seen":"2026-09-22T21:13:28.311993Z","last_seen":"2026-09-22T21:24:20.886836Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T21:24:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.web3phantomapi.cc","ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-17","domain_rank":0,"first_seen":"2026-09-04T15:48:40.380411Z","last_seen":"2026-09-04T15:48:40.380411Z","alert_count":6,"request_count":7,"received_data":6435,"sent_data":3930,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"web3phantom.cc","ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-17","domain_rank":0,"first_seen":"2026-09-22T21:13:23.361531Z","last_seen":"2026-09-22T21:13:23.361531Z","alert_count":0,"request_count":12,"received_data":2816739,"sent_data":5454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3723ed6d09734b46571b6caec227055c","sha1":"9a2f61909f5d32a2288835251defd2b5d1b41a36","sha256":"8a18e2b5c2a33081bf4125243ed1572967c21f1d39ca926b59fbd7a27fddeb63","sha512":"a17e9863881d02da3d86d103befbc9c46405ffb7efc27f40030ae0cae3d43257cdc3e8a8ed5094c1864da4261434ce2d8a7e8187a08a3a5dc1b7eb2972ff9ff9","ssdeep":"","tlshash":"f111abfe1a1aa12e2307805e976b7914742150ad000a1441738c9f9dabaab6dd0cbb8d","size":1042,"data":"","first_seen":"2026-09-22T21:13:28.34363Z","last_seen":"2026-09-22T21:24:20.896179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-22T21:57:49.790757Z","times_seen":48897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-22T21:57:49.791407Z","times_seen":50196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/charting_library/charting_library.min.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-22T21:32:31.319196Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/vendor-84e7ed1e.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"280bcb1c8aa689f96b0f0e99750c303c","sha1":"0b4eeb5ad26b76e134bc1d2046518f7bb3dc998d","sha256":"86066d4462bda46f82ffaac79c975f6e614ce872772208b691cd9fb74f80cd2d","sha512":"908a43b9947034579fae38eba1ce8e239b05b2de54e4175f797c0713916c05367f80ebdcc9036476763d5063a1dbe50781eacb6bb92e2cb578d48dc7cd0d7bf3","ssdeep":"24576:3yPQbby4sc/lwuYpnvOq1+U4xWznfbyiCFL:3yPQvy4sWYtOqUU4xWznTc","tlshash":"27353ac57692f06147ab20e240bb0007f3396e59744e84a4f169d8eb7dbad89d277f38","size":1058584,"data":"","first_seen":"2026-09-22T21:13:28.336084Z","last_seen":"2026-09-22T21:24:20.89869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8d255a299e150901ea4e4c2f0468f481","sha1":"bb404a945fd3291d2807b3d91e24189b0587cf7f","sha256":"2c489ceafe491cee044b229dbb6c5ebccd7c4bf718f56fe54607e62c9ac8b468","sha512":"d823603145ea3a330176d4f3a5625254c8380931822c5b5a0389307f7d1cdc22c5d15ef5899d669b4928992af7f6abca5395bd2150c4ed850413966024726c22","ssdeep":"","tlshash":"bbe0abf7327dd0209581522a19ea18afe28261725c8c1e2df4c5a20b9e4dc28217c051","size":408,"data":"","first_seen":"2026-09-04T15:48:45.654065Z","last_seen":"2026-09-22T21:24:20.899384Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/en-2195630e.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1620a216fe0177607c47a96304b2ce8","sha1":"750279fe97fa7aa9b9286a1465f93f6d1969dc1a","sha256":"afece0bbbcb273e4f32f395fb41376bc8d8dd3d95c9ad38ca6b19cdc8ff33893","sha512":"bb11ef4948e3d37f691e8b3f3d112d50e2dad6f5a8e32a4a3b97858cfc5b769ffef33960d15c6e35f2be2f4e74772a5f87067b5b6c713a97f91d0851149fe3bd","ssdeep":"768:KGtZcEw/o7rWOvAFsifnAhC2rAaAMFVoP6+6svGnu8clw1mwO6fpk7aOC:uponWOvebB2rdFVLsvX8iwqC","tlshash":"0df2d6ce7e16889a04f35377b4ce5e6021f609c18255880e4fedc5fd83a2b67a367a74","size":36876,"data":"","first_seen":"2026-09-04T15:48:45.636528Z","last_seen":"2026-09-22T21:24:20.893177Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-22T21:24:20.899988Z","times_seen":7535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e53bcf8d96bd94c87849c971f200ac2","sha1":"cfc0bfda8ceb2bcfde66b6b910a1e2c0a5ac8574","sha256":"992d170eda6c9a677f3838179025bc488583852c75de38048d7b647808272f6d","sha512":"75d52cfc26af5eff4aaa814b4ee4b8817a4dfc0743e9ec463d0e590e0c8d5d8fb462e4d1d0014a0ba61e8f788d917d0122c45419de194a9027088cf6e1e03f36","ssdeep":"","tlshash":"15c08cc8b1c22e002602681020bf34e49024502771481b028d94d8582e230f09233fdc","size":147,"data":"","first_seen":"2026-09-04T15:48:45.652107Z","last_seen":"2026-09-22T21:24:20.900551Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"196b4e62df90a968eef60ee22c8f52ef","sha1":"406182fb5de0ee70ed9ab43a610dd316aaa6821c","sha256":"5ed7c85c51929e50abccb8847e1b86f31ff6f674f527a88e64a85c7b5c0bdac0","sha512":"06f9de94a33005149da3e8608574f30c044985929e6fc957a4efa9eef2669df8c78cbf9408a006bcf5ed6553e807116220d794032a8ac669926560a85a48968c","ssdeep":"","tlshash":"f4d0a7c961d6aa1016051a1366bf61e1d0349029e2085b17aeddf88d3a570f8d337f98","size":242,"data":"","first_seen":"2026-09-04T15:48:45.653155Z","last_seen":"2026-09-22T21:24:20.901065Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/index-72b21280.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4732d547a96500dac71444e3c0b285ad","sha1":"ba549b47c060e6e8843d6692ec2a22434dcb4fc3","sha256":"f971be5177b78373208295dfaa2f346537ae856292dfdc85214812fcdedd3d27","sha512":"e9b043d3454586c955d3db4591a3cbe5a9c1da90348ea8e048e632816db8837655033509aa8a7019172d42c6c8ab1055cdb515f3d0265c4803cbe9a228add254","ssdeep":"1536:B0HPtmGX8vlT2bfvZOMicU/fgmK4ElqqOhEJDyZbgRFG6u:mpX8vlT2gcU/oChEJDXjju","tlshash":"0fa36ddd980a1eff6cbe0848ad5b5910116d1f9258cccc93b3af9e5a27f9cd0a25d708","size":103330,"data":"","first_seen":"2026-09-22T21:13:28.314117Z","last_seen":"2026-09-22T21:24:20.892579Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-22T21:24:20.901573Z","times_seen":7242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/#/no-wallet","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-22T21:24:20.902135Z","times_seen":10387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:32.970Z","timestamp":1790112212970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:33 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lYyONkx0a1z4cvvS9f1W%2ByPoLF%2BUG6iPgaqJjFsIJpOaNdNojoPYyEmIpzGoep0kyAEShPRs5YHW8bO6BZgbiyL9%2BJS7%2BaWtT1cbvNLlFbSCMasb93ZwjEfMWeuks9BCibjECm%2FNdHNTEc%3D\"}]}\r\ncf-ray: a3f45f131e9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":913,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/vendor-f8fc287f.css","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.245Z","timestamp":1790112211245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/vendor-f8fc287f.css HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-16c33\"\r\nexpires: Wed, 23 Sep 2026 09:12:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xScRwpRWC5eJsXS0nqJAVVKA%2BfBMnyx0YPR9ppMUFVjArkS3o87PLEnz%2FFEngtxhenngiUj%2BRERtb4m8SomCkZB06XO6VHKDDO%2BdUSmj45hCoO9jNj%2F493JF9%2BL3oACIhw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3f45f084c1c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93235,"size_decoded":38560,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"48afbb3fea406755fb800b9aaa52188c","sha1":"d67991bf8171c060cc3eb1d1ac51b4f42d6b546c","sha256":"f8fc287f65de178db85815d736b2cf5f6ebedd867b64a046fb61a383d883bfa4","sha512":"aa0dcef9a115ac710b1d3f23e330a8aa6627896f2af57a346b93f75294235cc5c1d777ba5f41ce5ddafbdd8cd27ff84922334a77debb81d1437029a249960579","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Lb:BnNIClDsIxuVS83b","tlshash":"9393d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-02-27T19:52:43.563869Z","last_seen":"2026-09-22T21:32:31.32716Z","times_seen":54,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/index-d15c7584.css","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.246Z","timestamp":1790112211246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/index-d15c7584.css HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-4c82e\"\r\nexpires: Wed, 23 Sep 2026 09:12:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iw7Je4PwbWnsauY9VCEVv%2F0Cz6FZdFePBYMSe1ZpsMUxz3FLWxFr1dwES5DyJfspK4kRep%2FiGHv%2Fmli3dKM8qKe3S2ndri5YgVUM0J1t7rMSn4Pcd%2F43BYqGaTElQffSgg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3f45f084c1d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313390,"size_decoded":67909,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f0cc8b518a0f4eb4653982eb32b377a6","sha1":"64192c7ac808747f19fd33b8301331ceda23aa24","sha256":"d15c7584e791dd0b1b2d26e80d15f68b2bb608f310d4da08a5b743aade00e4c3","sha512":"776eb3cb6e811dc271265075ee694ab8c77da8c04a1e5f5e3a72bc6330cc252cbda1a66257e28b6c3bf85e086d6bbf7a950e24f3ecc3f3fc5e50893f27c1c73c","ssdeep":"6144:ncvxsaTJ03EkZ8w71ZACkFDS3vyf58rBeV05T3:cv1+3dZ8w71ZACkFDS3vyf58rBeV05T3","tlshash":"7f64d8a9a590117c6f27aa7997ce9ad8f23ce6719c118ee8f24010094fc3ff91367617","first_seen":"2026-09-22T21:13:28.333558Z","last_seen":"2026-09-22T21:24:20.889005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/platform/web3phantom/favicon.ico?2.0.1789845128801","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:32.295Z","timestamp":1790112212295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /platform/web3phantom/favicon.ico?2.0.1789845128801 HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:32 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Sep 2026 03:11:52 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"6aaf4ef8-4b25\"\r\nage: 656\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qg6kD%2B2enYeWcMDXz0IUovE5pCVXxrGWVZrRyJfMK2aAAWCMRgJRndbwfGgGY3R2sQ4M3p%2FJbiRkOvZJZcyFKHmxg7TNf6ZO34WDZ1Fk6Qycv%2Bj07gb5QUYcxj84TxFJkg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f45f0edc8c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19237,"size_decoded":19430,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"a173b19ec5edbfe2f9dbef35c691be85","sha1":"7bf5f15020a3a752d4beff49480c3f07273e3349","sha256":"65bd8be546c8fb45d8b6694b6c0658c46265216bce7974b0ff443abc0ed7e502","sha512":"296372d46f94c9eea6b507837f99805f3664237d21df5034778a819047ef3c79e226ffc76f8fcc882a96bb2175b2a527d31e160d00810a9f6a8fee1f208eea92","ssdeep":"384:7BGMI+PSBcmbLF9ofmPAlcDxOJNwFVPu7PoVLm+SCTE:QMjPqcmPFSfmC4M7I2kI","tlshash":"bc82bf0cc8e2e523916c512e3453cb7520c1eae84883e3d4539ba7c2b2dba9dc321b7d","first_seen":"2026-09-04T15:48:45.644259Z","last_seen":"2026-09-22T21:24:20.889743Z","times_seen":5,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/type/defi_activity_type","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:33.220Z","timestamp":1790112213220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:33 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzhXWuKbubcU9IHPOoLrmwn%2FJGswd%2Fe%2BQBMufLdATRt3cAmzBuAKkx0GgcDf5uiaHdqLtDK5at%2FPdAWMT61A8GDnCa%2BVv0VBHGKXls0U4CXqwWpLfJRrg0k0Pf%2BoAvvwY10M6bFy3uo51vI%3D\"}]}\r\ncf-ray: a3f45f14af0f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":925,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/vendor-84e7ed1e.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.244Z","timestamp":1790112211244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/vendor-84e7ed1e.js HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-102718\"\r\nexpires: Wed, 23 Sep 2026 09:12:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z%2FJ6pBlMISqDCoyRZtEwyCZfXIMwepLIKPYocIYA1uZcN%2FbmiNyX67nlefWI0JEGZFNGWF8HeYajMKaDyFOdf9bh2BvErPPUHKjvA0%2B5RwU2ItelADc2asBuTTX0kyjPA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3f45f084c1b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1058584,"size_decoded":351424,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a029f640af85b17d44af15e20ff9b02","sha1":"4f230f6fdedac1c5abfdd75ca4d0eac5fe42441c","sha256":"2ca9b35a431e70ebf3a72d4b8330036bc3eaa81f2eb6ace767364ebedb677515","sha512":"5029afdbc157fe1d8af5691a4da465e0b3084d8c6fa832d7441218e1c95ff2e9dffc9796e1b4ea2755a3cede4315360d8bb8148fc077e840ff30a02d3acbc31b","ssdeep":"24576:3yPQbby4sc/lwuYpnvOq1+U4xWznfbyiCFT:3yPQvy4sWYtOqUU4xWznT0","tlshash":"b7253ac57692f06147ab20e240bb0007f3396e59744e84a4f169d8eb7dbad89d277f38","first_seen":"2026-09-22T21:13:28.316606Z","last_seen":"2026-09-22T21:24:20.890337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/platform/web3phantom/config.js?1790112211556","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.559Z","timestamp":1790112211559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /platform/web3phantom/config.js?1790112211556 HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Sep 2026 03:11:52 GMT\r\npriority: u=3,i=?0\r\nexpires: Wed, 23 Sep 2026 09:23:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"6aaf4ef8-17e\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J9b7UclLrouXBmPX0xIcwE5dB6QfhN5prtYVJib1LrPGVjm%2FQ%2F6jTbmmwG0S8%2B27%2B8OG7eFb0cHpBnKSnNJteIcGNuuaEHCcQK9AZT%2B8K9AKWkN4ygW%2FEdmA%2Fi09PTp0w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f45f0a4c415695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":1054,"mime_type":"application/javascript","magic":"ASCII text","md5":"27600fc9cbd29afa8fe138176dabb7c8","sha1":"c9a8529ba33197e7ee6ce5f8ad73ec4770aaea1c","sha256":"c8a97674479c3c3f7ad7fbeeab81d44b397be3014040a8eda0aca3e534cb82cd","sha512":"54b4b8ddb41ece15beb5379bc9f76708f1e73ddc8bc6d01bf14c21ec2c87f0d7364457d0504e933fe6004b689d41e42692a2bcbca7f65c80e728edbd4d55ddd4","ssdeep":"","tlshash":"f1e068f7737cd0249580562a29e9186ff2c361725c9c2a2ef8c9a20fde4dd5861bc151","first_seen":"2026-09-04T15:48:45.643346Z","last_seen":"2026-09-22T21:24:20.89096Z","times_seen":5,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.web3phantomapi.cc/ws/91a6baec-8ed9-4e0b-9691-5f27b8ccb9a9","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.793Z","timestamp":1790112211793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"GET /ws/91a6baec-8ed9-4e0b-9691-5f27b8ccb9a9 HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://web3phantom.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /LW0qZNshx/PnXlrAkxjdg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 22 Sep 2026 21:23:35 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://web3phantom.cc\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: JSESSIONID=C058FD4BA2D81E2F443510FEA391F8F3; Path=/; HttpOnly\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: UejfrxwzvHJ64ueG4pnXNStM+IA=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7R80fwyMJ0Yb4vpy8xJ%2BvDt%2BraDaj%2BZtHcuNpR0sas2TT3IJ07%2F9D2FM75fe7aYq6lxKEfKdEwA342nznMHBoGuBocAm%2F%2BPrVm9KU8%2FiLO9pfjhRetWjsOLYEWNwrc4zi4bYK9T8u5uQM4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3f45f1f9b5356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"C058FD4BA2D81E2F443510FEA391F8F3","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=C058FD4BA2D81E2F443510FEA391F8F3; Path=/; HttpOnly"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":972,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":7204,"timings":{"blocked":-1,"dns":3169,"connect":3170,"send":0,"wait":850,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getApprovalAddr","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.996Z","timestamp":1790112211996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getApprovalAddr HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:32 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cPqVqjR0%2FlKuoWOwhlrr0TCQZfxreN8ff%2BxjeHxiuJPzl6MU5%2FRhbuQBVuvmUKl6%2FRjKIUqLs8yeg3%2Bf3A95pqWaLBN0rrVmH0CD45ZFLYc5wcXwGmnGlApo7nYLSbv%2FxWNvjHa4ssnCLE%3D\"}]}\r\ncf-ray: a3f45f0cfd1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":900,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:32.973Z","timestamp":1790112212973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:33 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nGwNhf1kDBs0JYx8vzThhs5w8QNndHYSKBWAD0EnQonYRl7wRt0jupFphxIDLWTDrAE%2FVuDwN1C%2F8zjiOsR7JFBhe5P%2FKnUc2t104EaAvUK7jbb8LsLiOH5CnsG76PtVRejqBv%2BYRHJZck%3D\"}]}\r\ncf-ray: a3f45f131e9c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":911,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/charting_library/charting_library.min.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.237Z","timestamp":1790112211237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 03:11:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4ef8-2a6a\"\r\nexpires: Wed, 23 Sep 2026 09:12:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0T5WBUgT%2BEWq8TFif5GKNJNXAk16S%2BB2%2Bls5fLif2ooCFf4uqxF9mGMNeJ618ZH3wf8AeCucjcSW%2BU2c%2FhlxhGuEl9IOeu%2BC%2BtjD2J4YfTa0Cmk5Jtlm5myMRNH2GinCYg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3f45f083c195695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3989,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-22T21:32:31.319196Z","times_seen":1481,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/index-72b21280.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.241Z","timestamp":1790112211241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/index-72b21280.js HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-193a2\"\r\nexpires: Wed, 23 Sep 2026 09:12:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 657\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sulWAZJL42WrJlryasmk86dHxkY4vzMJpvpbJYy0c5y2GDRSu9Qicc0p5%2FJjLPLJrixK%2F2rQIE3iPgvlcGH8Pfwy6zR3G%2BJ8OmQwujzwGAk8B%2BcK4QmjQviAwckA1D0Zg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3f45f084c1a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103330,"size_decoded":29959,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"4732d547a96500dac71444e3c0b285ad","sha1":"ba549b47c060e6e8843d6692ec2a22434dcb4fc3","sha256":"f971be5177b78373208295dfaa2f346537ae856292dfdc85214812fcdedd3d27","sha512":"e9b043d3454586c955d3db4591a3cbe5a9c1da90348ea8e048e632816db8837655033509aa8a7019172d42c6c8ab1055cdb515f3d0265c4803cbe9a228add254","ssdeep":"1536:B0HPtmGX8vlT2bfvZOMicU/fgmK4ElqqOhEJDyZbgRFG6u:mpX8vlT2gcU/oChEJDXjju","tlshash":"0fa36ddd980a1eff6cbe0848ad5b5910116d1f9258cccc93b3af9e5a27f9cd0a25d708","first_seen":"2026-09-22T21:13:28.314117Z","last_seen":"2026-09-22T21:24:20.892579Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getAllSetting","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.795Z","timestamp":1790112211795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:32 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16xVQMy8GAxIdy5XPXefgpA8ufi69tEoJtw3Z7ZvqOrOTiUNdDLJ8ds7rMvQeUw587t5R5IdJyHBiyGjnY%2F2iQGyfmLLsjJjkagjioFbElVoXh2NwlNRW24LtueCGb%2FCLrEsyKJUuLFyZ0Y%3D\"}]}\r\ncf-ray: a3f45f0bdcc823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":907,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":1,"connect":20,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getCoinList","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.802Z","timestamp":1790112211802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3phantom.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:32 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3phantom.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRRo2aX5189w83pYWb8xZ3A0JcOHOPg3v%2BDah87e5BdIpm9a9Sm1bdUXBw4zkNzEZyMojnumzKvJ3ozUla3zfOIKV8XLeUUDilK8VobheiJXpjsFRpLx7EIaOdoJTM%2Fh4gC5FbeZcITdNVc%3D\"}]}\r\ncf-ray: a3f45f0bdcc923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":907,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/en-2195630e.js","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:33.142Z","timestamp":1790112213142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/en-2195630e.js HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-900e\"\r\nexpires: Wed, 23 Sep 2026 09:12:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 656\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xf2Z5HYnGt%2FHoJmeIDp81htNWkN8V6aCf6FkH13lzR1LGubYWi5ziNxq3bv2KG%2Be4Ubsi6iLEnXeDkgRvijj2p9hPBiFcaDjk%2F9KwvPd6ZwaTF%2FcHQeVnAI9NsPtthaCJA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3f45f142cdf5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36878,"size_decoded":12516,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36859)","md5":"e1620a216fe0177607c47a96304b2ce8","sha1":"750279fe97fa7aa9b9286a1465f93f6d1969dc1a","sha256":"afece0bbbcb273e4f32f395fb41376bc8d8dd3d95c9ad38ca6b19cdc8ff33893","sha512":"bb11ef4948e3d37f691e8b3f3d112d50e2dad6f5a8e32a4a3b97858cfc5b769ffef33960d15c6e35f2be2f4e74772a5f87067b5b6c713a97f91d0851149fe3bd","ssdeep":"768:KGtZcEw/o7rWOvAFsifnAhC2rAaAMFVoP6+6svGnu8clw1mwO6fpk7aOC:uponWOvebB2rdFVLsvX8iwqC","tlshash":"0df2d6ce7e16889a04f35377b4ce5e6021f609c18255880e4fedc5fd83a2b67a367a74","first_seen":"2026-09-04T15:48:45.636528Z","last_seen":"2026-09-22T21:24:20.893177Z","times_seen":5,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/assets/ty-99bda379.png","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:33.215Z","timestamp":1790112213215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /assets/ty-99bda379.png HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4f08-c2c\"\r\nexpires: Thu, 22 Oct 2026 21:12:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 656\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbxNLTFJlldAXoffGa15GtpNhDyO4KIJMx8D%2Fa2CVcDRDbbCF5uGOnwCinWI9daznS54CVswYJTqAgKKSJ%2BxBQZDqqyRCt8XOyihjoUVFN5HbQQiYs%2B9E1LEr0MraELNzg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3f45f149ce55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3116,"size_decoded":3843,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f299aca307e4ccd4a153f30c0d533ec6","sha1":"28ed5ee0be6d9853079d64549042e7d88163326a","sha256":"99bda37903ab83c723058cdd19a112396a11ff13e4422dd0c8b974a14b4dce30","sha512":"cd3a7679cbb534e33f9789770644895dde12bad1d010cc9a3215368290001190dfaf6059b4c6b10e7da88307d102f2ef5ade92f6c7f2f14baad561f8cb309104","ssdeep":"","tlshash":"24513cb6696644a18dc24ae2f8dcba65f1234400ac177f0940e72fe613d0be34b7729b","first_seen":"2026-09-04T15:48:45.640043Z","last_seen":"2026-09-22T21:24:20.893709Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:23:30.599Z","timestamp":1790112210599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 03:12:08 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a40h5iWoBjdgZeCuf8EjHUL2AwiJmudBJTmNZmIiw4c4ODQS%2F2vpFNZaJp0YdUzNu46wvgj2OjX%2BYWSmzKULSW70uYIRWK3m9a1%2B4EWLeM8aB%2BVuhcjIgxOz51eW5ShZQg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3f45f049be85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5076,"size_decoded":2618,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1102)","md5":"badf8f20e33d868e2dbef41a5743d4f0","sha1":"1af233690304a34a60bea216b30cf13ff74ecf0a","sha256":"0ee77eb733b6fde9c84b2482453c2e64ef0109717635315784b80f3264fe1a5c","sha512":"8c1ccfd50822b94ca5904eff8e19e78834ed7e18a5fd6ff7ee239916113b8c7efffe2670353576e954b718759fa5f083f9fa2077600889ea2e1fb43216930d8b","ssdeep":"96:Tr82uQ5yKu1OtDQHKsxM/uur6TCZydHRH/gC2mUsGKYiwwGpuB1niH7iHZH/w:TFJlUHRCZCxfz2nf/zbpuB1nibi5fw","tlshash":"3ea153a7adb4c92b1366013bebdbf0085fa291838519585075cd50ed4fe0fd5c8d7b64","first_seen":"2026-09-22T21:13:28.327167Z","last_seen":"2026-09-22T21:24:20.894308Z","times_seen":2,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":25,"connect":24,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/resource/fonts/Arial.ttf","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:31.333Z","timestamp":1790112211333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3phantom.cc/assets/index-d15c7584.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:31 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 20 Sep 2026 03:11:52 GMT\r\netag: \"6aaf4ef8-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 657\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZd8QuqTIFz3264DaMtSFGEH%2Fa1bltO0letHr4qBB6SIA3bVoWP%2FDvXq1aoepoK8c%2B%2FqQP2wST%2FK8LuFYJ8SLHOTRGNU9aeVEfoRlFlitGjxExuJlg6dw443Ok3%2BehchGQ%3D%3D\"}]}\r\ncf-ray: a3f45f08dc2c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047784,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-22T21:40:26.146749Z","times_seen":8259,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3phantom.cc/platform/web3phantom/logo_144.png?2.0.1789845128801","fqdn":"web3phantom.cc","domain":"web3phantom.cc","tld":"cc"},"ip":{"addr":"104.21.20.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3phantom.cc/","date":"2026-09-22T21:23:32.293Z","timestamp":1790112212293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantom.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:44:33 GMT","end":"Wed, 11 Nov 2026 04:44:32 GMT"},"fingerprint":{"sha1":"B0:D3:A8:27:2A:50:C5:59:CA:48:D5:02:F0:32:CD:4E:31:36:DA:1E","sha256":"C6:94:25:BB:37:01:05:AE:A3:28:9A:65:CB:67:FB:8F:6F:1E:19:AB:72:C5:30:4A:FA:1D:1C:F5:EE:AB:E2:D8"}}},"request":{"raw":"GET /platform/web3phantom/logo_144.png?2.0.1789845128801 HTTP/1.1\r\nHost: web3phantom.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:23:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Sep 2026 03:11:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaf4ef8-1c61d\"\r\nexpires: Thu, 22 Oct 2026 21:12:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 656\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5tWRwVSPeRjuq6qOE3yFVFM%2FAZWMksgSQTydK7AVX4IlFoK9yF0gxHDvfTFZO9q04sS8AjEFD%2B1AYi3OPp8pSDC%2BJZRaRcu1HmAlITY48OyA55%2Be2IFevvVCkVzZnJS3g%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a3f45f0edc8b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116253,"size_decoded":112358,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"334185cd0ca35d71ce8f61183e0089ce","sha1":"a3f9990734a75faa721a8efee264850599d6c215","sha256":"41cdd2275e3c004d371acbacaf4398ae18de2166c2f7d4001288b2b4fed3c4ba","sha512":"8d10a20448348363f69d9d7b7867f7b544abe7bb72d7243d023be8e01256edf7651b408275ed76a62f78b9e685bc0028d0fa07d36f056774fa39c677d9cabe9c","ssdeep":"3072:OEJqPa5ce+RASAcJsG+ZHn+Gk723wShQO9gzyv5M:9+akRScJVGBwShkzg5M","tlshash":"a3b3e077c717452a0d472ef4a07f8e5995c49d805a22e9225bbd4488f622bccbf37acc","first_seen":"2026-09-04T15:48:45.647353Z","last_seen":"2026-09-22T21:24:20.895554Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
