{"report_id":"083a84d4-020a-4720-a27f-a53c6ac78d4a","version":6,"status":"done","tags":[],"date":"2025-11-06T16:29:16Z","url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"title":"ぷらら Webメール","dom":{"size":100613,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16159)","md5":"39d6c3a68232234cf07640a217fce5ab","sha1":"7f96c7f8f4dd00024f119f331a57b3a7cef53aaf","sha256":"41555411bff33bd2f08cd24d3354cd863c56df790c0f05054efaa4670e5a9e5c","sha512":"f70636f6a9b25ea469cbf3abf11a867ea423e8c1511ae0748b83906d07d951a6a9e73db95377a1b4699ad46b8269ee662ab67834d899d302b300c67641a05f36","ssdeep":"384:z0TRrXeq1e0VkGViGnRyc2tMkisOCHrC/brxhqWd2XYaJEhZFdEPf0QCooQZwFgp:eVigUc2tJ6Hq4L2THAQlfKJzs/","tlshash":"8ca399d911e05523493b2ce0596a0d4f7a3dbdba83485aee90049ff4d5b9780f3cbe98","dom_hash":"domhashe98967f55dc4c8790ce3bbe6efd98a2f","first_seen":"2025-11-06T16:29:24.808189Z","last_seen":"2025-11-06T16:29:24.808189Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-11T16:29:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"sec.plala.or.jp","ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"domain_registered":"1996-07-24","domain_rank":0,"first_seen":"2020-03-20T01:37:55Z","last_seen":"2025-10-31T17:50:36.668765Z","alert_count":0,"request_count":19,"received_data":980885,"sent_data":29938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"greenearthfze.com","ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"domain_registered":"2019-06-20","domain_rank":0,"first_seen":"2025-07-18T09:22:58.130618Z","last_seen":"2025-09-11T23:44:00.039645Z","alert_count":65,"request_count":13,"received_data":42554,"sent_data":6624,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"127.0.0.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":0,"sent_data":8881,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/tags.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52fb1a03e798d7e89f9e6d69b1c1cd69","sha1":"213c73576008960de131c2f92f60e317ea44f984","sha256":"b358d54f851e12461d75c6687c6de92bd89e1bf43a04f255fd04468c7ae1be5c","sha512":"b7a2a47e491358857f6a354f26a3c14eef594deb51c2b2f80ba948fbd5d538807aa23ed78265805af0cfabc77337b54281a326dee9b22f946fe05d78c3f78b54","ssdeep":"384:kJEhZFdEPf0QCooQZwFgXTJBA2bwf9vsfQLObfbZB0ma5h3wXZlzALVQX35DQGrS:YTHAQlfIFAAPQPsJJ","tlshash":"d2a39dd815e09513493b1ce0996e094f363d7dfa834466ea9004aff892b9780f3dbed9","size":99435,"data":"","first_seen":"2025-11-06T16:29:24.844886Z","last_seen":"2025-11-06T16:29:24.844886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee7b1f1bcc3733c1439403847f33b57c","sha1":"031559cf5be39fa10d5f15ece2b768fe0e5f2b00","sha256":"8463267d00381b0b3ecd446c840505575a8afc4d89c5a0bdef011352d30760a5","sha512":"797eb5806a3ed930eb21bbffa62932f2e46f057fbc3c9bcaeba32dc52daee9d1ec5e99a40740a0f0e4969885f4e61e8517a64981d6640e09d11de0228be70433","ssdeep":"","tlshash":"4fc02bc808087e98c088007792c42128e4b05041f2ee757036453084308ac049750cc0","size":134,"data":"","first_seen":"2025-11-06T16:29:24.84024Z","last_seen":"2025-11-06T16:29:24.84024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/js/common.js","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"807a21d756eb13dea528b5289af0341e","sha1":"f16e2bc8650f5f695068acb7df7a98ea1908c9ed","sha256":"95c95e30e1bcb7532e7be902b3bd07fc01f8c38ca0bd3c590c8e4c0a11bcbc74","sha512":"c216b294eef5f3dba4b916ef6f7377cde0ac1c17320dc62418618d7ba2d1d6129b074d2f38109d19b6704adac4ca02ae71e0480a34173040c55b670fcdd89770","ssdeep":"","tlshash":"fa5100cc0fa38c784962c815ea7b58c5eef05d61aa31f014f45e729a258cb66126ccaf","size":2538,"data":"","first_seen":"2023-03-12T16:36:13Z","last_seen":"2026-04-06T10:10:41.397293Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5eb6348ce940dfcbd792fb03a17c0c6","sha1":"c0fb7ee1f0fa28a096383444bce4af94c3142b32","sha256":"3cfceca8f68d71c5d2cca9bdbf342954d8980e09024c3e4f48b45a4df145c573","sha512":"98ab958c18f1336f0aac3ecfee7e40341404f7615feb91c25a33f698bba91c4cbadb08df488e853c3c5fcf82172c51bdad5966c7d36afe34f0e33c6b2e90cc2b","ssdeep":"","tlshash":"fcf0462adf84080f47d6032a972b01cabf764bb53c99188c185c7fa4141082c61cbbe9","size":572,"data":"","first_seen":"2025-04-01T11:23:23.910468Z","last_seen":"2026-04-10T03:04:23.239256Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce1ae59272308391ea5afb1d2cb09cfa","sha1":"99ebf0a88489c7590bc3a25f3854991cec739806","sha256":"cb60ec3670684c89e6ae5ce8fd5b633403305eb2580aba06cbb5b5c1bfa33785","sha512":"a78b67feeba594b8c3e82ba9821ed852fa025ead9cf67bc19395cb1ccf053c010ea3a9a9cea95a126e20251d4e448e49abbb75c5a494e360a56034c7e6fc42ec","ssdeep":"","tlshash":"ba600000cccc0c30000030cc0c000c00c00c0c000c0c00003f00c000c0c0c0fc0f0030","size":15,"data":"","first_seen":"2023-03-26T01:25:15Z","last_seen":"2026-05-26T06:55:50.167897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02c1b3ea63ba447f0f5c86e287480d99","sha1":"95ad5dfbeeccf2d5e0043449fc179b70f208928b","sha256":"9d30de601753141dd6c4d5ebf62f016de35acec674ec17e0a1c7141160a378bf","sha512":"8b95bab22f8b515c734f9ab3122d0d64c833e6b71313104fff3b7febf2a287ad9d421822c73e70ca50350f4ae811eabfd0ef16225fed2c54ae1b8be6b52ec6b6","ssdeep":"384:i1e0VkGViYhqWd2XYr4F33bIwB+JEhZFdEPf0QCooQZwFgXTJBA2bwf9vsfQLObR:WViyq4LUGwByTHAQlfVs6Uc2tJ54","tlshash":"00a398d911e05523493b2ce0596a0d4f7b3dbdba83485aee90049ff495b9780f3cbe98","size":102617,"data":"","first_seen":"2025-11-06T16:29:24.850913Z","last_seen":"2025-11-06T16:29:24.850913Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b4f80fddbb86c0f9448cbcd74381d14","sha1":"b3d9b3e8ba4fdb8566199fa4881057077643fa94","sha256":"ef34e929169d04651e7b3e3b259d11f6d4e136bb9b8fd352996790ec49631872","sha512":"04275e1746f89b30418e22562245badcb413518e353be2795519638013b1a20584a0320b27810fa7aff8565967bb2c59ecebf486cecf0369063a33b6c8d44fe9","ssdeep":"3072:/S+VdLQWkk5lcQnLgwpHv7j47jC7jx7j17jE7jQ7jQ7ji7jQ7jp7j87j07jl7jVV:9DUWkLwNm","tlshash":"759420d816d1d023553f2c901a5e088f713d79bf8388529ad004bfb8caf56d4e7daea9","size":427312,"data":"","first_seen":"2025-11-06T16:29:24.814498Z","last_seen":"2025-11-06T16:29:24.814498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6576b8653abbff4ea5f60f4389666160","sha1":"dbbda8a9a462da70baffa60fcb256f74e833335a","sha256":"62cdd1a0c6409ec82565f1fa15cfe76e67b8a400cd9a34fa8c351e245acc14ba","sha512":"983272032900c5a83d3a096d80cfd161750de9b71b50445a5e1acbdec1b228277c903d791a8c97200f4cec3d62fc2ccc9ac130caf43dcfe8df96785ef2c72478","ssdeep":"","tlshash":"e6c02bc43062eacc30e200c866ec026e849023144e14da60e10130d5e3dc83163f06d2","size":134,"data":"","first_seen":"2025-11-06T16:29:24.82116Z","last_seen":"2025-11-06T16:29:24.82116Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49ed580f278d9b18c32496b36356c2db","sha1":"ccf467e2bec3fa2f5aaae9bd45051c3e329b4daa","sha256":"d356600b0b3b5397fa132a0e28e407e69e50c9a223e140aa21f1a24098b1586b","sha512":"70538e75aa8a360ea8a9f6cfe6a618480fe90aab4ba7956b5c86a3e6873ed9121d40a56e8bf711e843f0e70cd8a0c26b9421e85a249c5df01fafb104405259ea","ssdeep":"768:BGotaLIKIdWgHJJMe31URWY+u9Mtt0yWrnZgY+uQp7Vpo:BGrLI18gpJ2r+umNuQa","tlshash":"f024aadb9fd0907664ed1dc1461d48cf723c94bb4b488139e104aeace8f2654e6e7cea","size":222273,"data":"","first_seen":"2025-11-06T16:29:24.841651Z","last_seen":"2025-11-06T16:29:24.841651Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=2C3C3B81CA68A6B6672B5ED9D429CC2A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026pageid=99998\u0026sera_parametere=URVbBFRcXQNWVloABwUGXFVRVQBUCw0DB1ZaCgoHB1QFBgNTCQ8JVAJRWRVAQwoMWRUTFUMcCyEWA3oWBHQSVwcPFQRcXFUAXUBLFgB0ElJ1VUNWdBwKVVtbS0dAFQQhElIkRAd9HgFaCQ4DBlQDVABUX1FVCl1QUgEJCwpSUV0FVANYBwhZXFZQWwQFCFYAVVRAD19XWwAOA11VUgAOXVJWUlkDCghSVhJSQA4ATwAPUVJRCQ8AAQsDC1EDAQdUBgQCUgAPWlAFBg9VVlRUUQIAVwMCAApDUl0FAgMGAVwRDA9cHQgeFVoJAQoKCQ9DXw5bR1IEfgxBUV5cSxZVEwpUVVUWW1cWDmNRXVdfQBYRBgRcRF1COlBVVF9RUVQOEQASXAgN\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fa766f1a768c44e632d170ab03962f8","sha1":"03cdbae9aa7dc31877dc823aa6b00d5ba5b4394f","sha256":"f18d03dd3c31cefb938062df7a77c34c1a8b7d7242a091b503c308432f906ad4","sha512":"4447cf6ed4c7720fe7cb6b7f68302ead482cf576aae782d55bee1410cb1c502e8d6b24b6155d34d934cc1584cbe01c67b807ea011794be900cd8a1fdb2ab5c16","ssdeep":"","tlshash":"22800002eac00e2ecb00a2a2a30002022f02cac8e82f280882232228280c88a8008c82","size":35,"data":"","first_seen":"2024-08-19T17:34:34.47639Z","last_seen":"2026-07-15T14:06:27.108463Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eff409565ed1d22c17d73ce417bd15","sha1":"ae526f9ce16489f0ca53977b7722f56806555342","sha256":"d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3","sha512":"505ce0ccebf07887dab601f952ee07414468a5d4e822ecd45303ff24ae8793ede9c917e0c863a3756e5c214eb82df576b178397c5113a00ff8a42692f7b2c0a2","ssdeep":"","tlshash":"fb8000c20ca2c0b0b0a20c2e00283a008c0e0b38a22033a320a0a002a008003c0302ca","size":32,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-08-10T20:17:47.316477Z","times_seen":18051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53a62c719c1316a0b16b2fee56e64d35","sha1":"a7f44bc05e26622d633274c951d2899d5bfa5e2e","sha256":"ad83ebe073e566b806233c8a5c655c45394704c17baeaa9ae5a074b8c95b05a2","sha512":"92dbdc50d18874d448311a667b238f68b00a29b9b6a7bf61a75a4a5f4d8cc7b7c6148573481ba5f993b87ef74a94d506d33f5a4ac752873671cf5eb163892ffe","ssdeep":"384:O0TRrXeq1e0VkGViGnRyc2tMkisOCHrC/brxhqWd2XYaJEhZFdEPf0QCooQZwFgy:FVigUc2tJ6Hq4L2THAQlfKJzsw","tlshash":"a8a399d911e05523493b2ce0596a0d4f7a3dbdba83485aee90049ff4d5b9780f3cbe98","size":100504,"data":"","first_seen":"2025-11-06T16:29:24.853108Z","last_seen":"2025-11-06T16:29:24.853108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"eventHandler","is_inline":false,"md5":"00b65d000283f5f80295c17d8e45bfbb","sha1":"4c646fe85dd8637dc32b5f4249fbb64705095c88","sha256":"5c9eb150ba387998b9662582ccfb993f31c4635e3b662fd11299f96c865afc49","sha512":"9f4df4ce2e7e5905216bd039465369f3595c1ff4ce480ae6f69862772d38e07d575b21654b8e52fb0624caad97756b604560c187c6f2a0ed7a31f0d75ca20cd6","ssdeep":"","tlshash":"dd9002666191692a42c91316956151c13a321426a452244298551444011295dc591686","size":47,"data":"","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.234842Z","times_seen":648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ck=0\u0026m=2","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ck=0\u0026m=2 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T20:17:47.241466Z","times_seen":22472,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/check.js;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 7efa098e3483307e\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427312,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17253)","md5":"5b4f80fddbb86c0f9448cbcd74381d14","sha1":"b3d9b3e8ba4fdb8566199fa4881057077643fa94","sha256":"ef34e929169d04651e7b3e3b259d11f6d4e136bb9b8fd352996790ec49631872","sha512":"04275e1746f89b30418e22562245badcb413518e353be2795519638013b1a20584a0320b27810fa7aff8565967bb2c59ecebf486cecf0369063a33b6c8d44fe9","ssdeep":"3072:/S+VdLQWkk5lcQnLgwpHv7j47jC7jx7j17jE7jQ7jQ7ji7jQ7jp7j87j07jl7jVV:9DUWkLwNm","tlshash":"759420d816d1d023553f2c901a5e088f713d79bf8388529ad004bfb8caf56d4e7daea9","first_seen":"2025-11-06T16:29:24.814498Z","last_seen":"2025-11-06T16:29:24.814498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":27,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ck=0\u0026m=1","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ck=0\u0026m=1 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T20:17:47.241466Z","times_seen":22472,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jb=3b3e2e6e71633f3936676335646533353234653c30633a3963643732386063366b6a3d33633b61","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jb=3b3e2e6e71633f3936676335646533353234653c30633a3963643732386063366b6a3d33633b61 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/loginhead.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/loginhead.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 09:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3169\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 58","md5":"590e4aee24ab9e6f026d374ff67e5daa","sha1":"dfbfc73476f860f4bc1a977b9612456978fd5bae","sha256":"0be823c43133470e457a8066e02ef661adbe9b3d08e43a11ebeda87562fe361b","sha512":"4e2c492ccb3dd3834fe8c34be9fcd0a67dcdfda5c697358f51bdd390cbbcb566551e69e0c29c86ab2e83595c37e90877591241858a9726266cb9cad9cf5ba236","ssdeep":"","tlshash":"76516dfc58f0c825ac94e7770c16d8627f5a9018574964233168b6bfc54fe2836658fd","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.232422Z","times_seen":637,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*, 2kamd3p6/7efa098e3483307e8993ff28bc16c0a0ab096a7e2acb9bab\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://greenearthfze.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nLast-Modified: Thu, 06 Nov 2025 16:28:56 GMT\r\nExpires: Tue, 05 Nov 2030 16:28:56 GMT\r\nEtag: e441ff80a20743e9847809fc797c2ec6\r\nCache-Control: private, must-revalidate, max-age=0\r\nAccess-Control-Allow-Origin: https://greenearthfze.com\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T20:17:47.241466Z","times_seen":22472,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":38,"dns":1,"connect":16,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ja=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\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026ja=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\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=99\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","date":"2025-11-06T16:28:56.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026fr HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6576b8653abbff4ea5f60f4389666160","sha1":"dbbda8a9a462da70baffa60fcb256f74e833335a","sha256":"62cdd1a0c6409ec82565f1fa15cfe76e67b8a400cd9a34fa8c351e245acc14ba","sha512":"983272032900c5a83d3a096d80cfd161750de9b71b50445a5e1acbdec1b228277c903d791a8c97200f4cec3d62fc2ccc9ac130caf43dcfe8df96785ef2c72478","ssdeep":"","tlshash":"e6c02bc43062eacc30e200c866ec026e849023144e14da60e10130d5e3dc83163f06d2","first_seen":"2025-11-06T16:29:24.82116Z","last_seen":"2025-11-06T16:29:24.82116Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jac=1\u0026je=3d3f2e2468646c3535246a646a3d62623035613c66386338613660306c3b65606a6e6a353537616e676436673239266a66766e35323a33303b353835","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:57.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jac=1\u0026je=3d3f2e2468646c3535246a646a3d62623035613c66386338613660306c3b65606a6e6a353537616e676436673239266a66766e35323a33303b353835 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:57 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=90\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5900/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:57.768Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5900\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YG8B/6ChtY7RaBjwHPcvOA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":1072},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5939/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.950Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5939\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vk7VBwA2athIzWXUBh5Spw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/login_on.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:55.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/login_on.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 10:36:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 392\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:55 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"b1c7215db449a527baa88c02d73774ce","sha1":"9592d6b8cb74f2a9bea17e188a066acc7f86b8e8","sha256":"abac16ca16c7dd5ed2d0c3c53b6ea53474224de2ebe6d546e860b73df5334f54","sha512":"bc82c10737af4534a24b8ee62a0ed4bdc8b2b330df0a31a0f634f8e6984c439c74bdcdc8d68994a80f89e585dc4f21c0e9e9c94074abb59c4f10b9049903e926","ssdeep":"","tlshash":"34e061d555fa4811f1fb02b1ab9fe52a120db22c9803e11b1d19d27b1c6101964795a6","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.225465Z","times_seen":624,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-UA-Compatible: IE=Edge\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en-US\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=97\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19026,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"cd1b1438af88ce9ba672f64054b6a5f6","sha1":"73b1c90b89f0fe7e9c792b2849b93309e92bffaa","sha256":"0b49f9bccda520cb0ddf5232d78d8514db857898dcc01841a4eed8599183458d","sha512":"2f85a23bc2e89f7df32e87a44aaced002ee791b9549fe2988f867d3113a1d78c73a39770283b123a9a412dd49245b217f67a64dfce01104943023145a61a5835","ssdeep":"384:s4QLAsZkB98hWgz2Ug7O+ONDDIkxL3q+39:s50IE2OA","tlshash":"a68295046981ec3646638078d0e9be8ed3ac8532d356b46875df619bafc1c9c07b7b8d","first_seen":"2025-11-06T16:29:24.825731Z","last_seen":"2025-11-06T16:29:24.825731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:63333/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:57.762Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:63333\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pFqnmEIpsWJCK/JV04bgQw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5938/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.995Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5938\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7UQr7YUcS8OYtXqH922dGw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:2112/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:01.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:2112\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SvgHc84i6ZVxUXQYDEoN8Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/barg.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/barg.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 09:04:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1738\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 30","md5":"13a156ce3615ab6a1206daa3b16a69d9","sha1":"2efb6bc8681bf1d35dd317a9b47bff4c9b747885","sha256":"ba71589b6bb729587c3c110462cf7843859a61d03b0f9bb6c9724cf40cdd9f76","sha512":"e3a988ea2d7f0d9ee79b46d2d75959afe4b6cf1183e953cbf07464cd26bcb907bd8a9dd0bea77874453c3b5bd86283badee45fb5ab7780261b52ec0409da054e","ssdeep":"","tlshash":"d031f86297695edbdd1a02bc200921e70c04d52981a8b0a8a8e2bfdbca4da5013dc483","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.496032Z","times_seen":804,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=96\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102713,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16159)","md5":"43ea5d0749850db49f57949a5d46c8f8","sha1":"3587cf3dda104b3c319c96b006db1c035239ad57","sha256":"333a8bbfd60add89b09878138657c1f335d3fcdbe6d86b69adee15bd85a78f02","sha512":"b997b8181067b9e60bf69419ecc42ea437ce118cb7357552679d8cbba2e3433c9a8cc290cffef9135747e692ccf0c9ffc491eda92fc330b3e7103a4ed14e444f","ssdeep":"384:i1e0VkGViYhqWd2XYr4F33bIwB+JEhZFdEPf0QCooQZwFgXTJBA2bwf9vsfQLObI:WViyq4LUGwByTHAQlfVs6Uc2tJ5H","tlshash":"37a398d911e05523493b2ce0596a0d4f7b3dbdba83485aee90049ff495b9780f3cbe98","first_seen":"2025-11-06T16:29:24.828678Z","last_seen":"2025-11-06T16:29:24.828678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jf=3b3e2e6e71603f3131633766373238653366313c32346062313036313c366166383a6e63313a60","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","date":"2025-11-06T16:28:56.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jf=3b3e2e6e71603f3131633766373238653366313c32346062313036313c366166383a6e63313a60 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:6040/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.984Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:6040\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: khnc/Tj3fXzWSTWvD8xqlQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5279/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:01.007Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5279\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LIx9xjcIC5+xdjIvwiydzw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/login_bg.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:55.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/login_bg.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 09:49:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3136\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:55 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3136,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 727 x 400","md5":"8f2b6b11eed51dab9f72371d7d77840b","sha1":"007e482d8743a72f5abeec0abd1cbf033d503a8d","sha256":"5879f5c218c342a06b8eccf5376bdc944d99167de692ceff87324dcffa388778","sha512":"e3b917b726aba3cdbb89da4f0914693448de5bceb42897e1dd48691d1b4499f5b2e998c30f5f27d469dd1371fac4b8ee371533925f8b5c2c4ee911b36416b3ab","ssdeep":"","tlshash":"6b516ced04d5d4b34002443d09fa9abefd68eb3f98fc0a2032f56e98063f8968c96058","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-17T01:07:34.500092Z","times_seen":690,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/top_fp.html;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=95\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":100600,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16159)","md5":"f47d8f7375fad0baeccb117128f6c5d1","sha1":"851878bd36d4135e1f5e5252a4bd63a145008523","sha256":"4821cbf6fd6a581778d05ef5ce11557649252d532e3f67d5c0dbd93b3526d4bf","sha512":"ffd8bf851e1192d18dbdebc7e02d925955f9959d682013a172a0736fb47bc4becc01b5ae712b194204bb97c83354d713405f4971d8fcdb5a89635fd8c8f6d82d","ssdeep":"384:O0TRrXeq1e0VkGViGnRyc2tMkisOCHrC/brxhqWd2XYaJEhZFdEPf0QCooQZwFgp:FVigUc2tJ6Hq4L2THAQlfKJzs/","tlshash":"7da399d911e05523493b2ce0596a0d4f7a3dbdba83485aee90049ff4d5b9780f3cbe98","first_seen":"2025-11-06T16:29:24.83173Z","last_seen":"2025-11-06T16:29:24.83173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=2C3C3B81CA68A6B6672B5ED9D429CC2A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026pageid=99998\u0026sera_parametere=URVbBFRcXQNWVloABwUGXFVRVQBUCw0DB1ZaCgoHB1QFBgNTCQ8JVAJRWRVAQwoMWRUTFUMcCyEWA3oWBHQSVwcPFQRcXFUAXUBLFgB0ElJ1VUNWdBwKVVtbS0dAFQQhElIkRAd9HgFaCQ4DBlQDVABUX1FVCl1QUgEJCwpSUV0FVANYBwhZXFZQWwQFCFYAVVRAD19XWwAOA11VUgAOXVJWUlkDCghSVhJSQA4ATwAPUVJRCQ8AAQsDC1EDAQdUBgQCUgAPWlAFBg9VVlRUUQIAVwMCAApDUl0FAgMGAVwRDA9cHQgeFVoJAQoKCQ9DXw5bR1IEfgxBUV5cSxZVEwpUVVUWW1cWDmNRXVdfQBYRBgRcRF1COlBVVF9RUVQOEQASXAgN\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2025-11-06T16:28:56.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/ARF;CIS3SID=2C3C3B81CA68A6B6672B5ED9D429CC2A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026pageid=99998\u0026sera_parametere=URVbBFRcXQNWVloABwUGXFVRVQBUCw0DB1ZaCgoHB1QFBgNTCQ8JVAJRWRVAQwoMWRUTFUMcCyEWA3oWBHQSVwcPFQRcXFUAXUBLFgB0ElJ1VUNWdBwKVVtbS0dAFQQhElIkRAd9HgFaCQ4DBlQDVABUX1FVCl1QUgEJCwpSUV0FVANYBwhZXFZQWwQFCFYAVVRAD19XWwAOA11VUgAOXVJWUlkDCghSVhJSQA4ATwAPUVJRCQ8AAQsDC1EDAQdUBgQCUgAPWlAFBg9VVlRUUQIAVwMCAApDUl0FAgMGAVwRDA9cHQgeFVoJAQoKCQ9DXw5bR1IEfgxBUV5cSxZVEwpUVVUWW1cWDmNRXVdfQBYRBgRcRF1COlBVVF9RUVQOEQASXAgN\u0026count=0\u0026max=0 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=92\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5fa766f1a768c44e632d170ab03962f8","sha1":"03cdbae9aa7dc31877dc823aa6b00d5ba5b4394f","sha256":"f18d03dd3c31cefb938062df7a77c34c1a8b7d7242a091b503c308432f906ad4","sha512":"4447cf6ed4c7720fe7cb6b7f68302ead482cf576aae782d55bee1410cb1c502e8d6b24b6155d34d934cc1584cbe01c67b807ea011794be900cd8a1fdb2ab5c16","ssdeep":"","tlshash":"22800002eac00e2ecb00a2a2a30002022f02cac8e82f280882232228280c88a8008c82","first_seen":"2024-08-19T17:34:34.47639Z","last_seen":"2026-07-15T14:06:27.108463Z","times_seen":23,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5902/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:59.831Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5902\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: p0M3VHiELfzVjYZlo/T5Jw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":1056,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":1056},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/spacer.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/spacer.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 08:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-11T00:00:16.426662Z","times_seen":111229,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:3389/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.912Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3389\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: E9yEee/BVNp0ocI0KTGPug==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5944/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.972Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5944\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YXlaTEZJVf2evU/6HITxtA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/index.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/index.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 08:26:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2789\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2789,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 115 x 58","md5":"ee6284e8ab015ada7763075b85c722d7","sha1":"40826abe00d54ceed725fff2d90d63043b875558","sha256":"662a02c554ce83d623a3f8b01a1fc02ad7238798d2207ac839f8d129ab3decdd","sha512":"f5deff0159b6a35a1bf0d715f8b9eefc2a7d44974fa1d7202d904fe1ac320779c160855185c6bc878c81589aa6784b29f6e892939a0f04b4bf32dfa688b9be7a","ssdeep":"","tlshash":"c2514cc1f3dc83cac0456138bd1ea7c7da4b0594495f30e2c117f8c76024386aab82f2","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.499116Z","times_seen":816,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jac=1\u0026je=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","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:57.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026jac=1\u0026je=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 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:57 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5901/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:58.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5901\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: q0whxKqma2oADtC7yQHHIg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":968},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5903/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.900Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5903\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9wQvY3Jw101dVYHzXx2qfw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:6039/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.961Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:6039\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MINlbGlV2NrOF99xnOS9eA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:7070/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:01.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:7070\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: n0idehACf6QxEWcXWoEgXg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026je=393b3c2470663f2e7066743f34333333332f3624373932302f3132353f2e353b3839253b35342e3d3b32322f333036342c373938312d3b2c31333a3b253b2c37313d382f3a2e373131332d352e353933392f3724343031392f362e373136342f3f243e3236322f302e3739313a2d382c353037312f382e373237322f302e3233393a253b2460607e3f31","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:01.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026je=393b3c2470663f2e7066743f34333333332f3624373932302f3132353f2e353b3839253b35342e3d3b32322f333036342c373938312d3b2c31333a3b253b2c37313d382f3a2e373131332d352e353933392f3724343031392f362e373136342f3f243e3236322f302e3739313a2d382c353037312f382e373237322f302e3233393a253b2460607e3f31 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Thu, 06 Nov 2025 16:29:01 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":40,"dns":1,"connect":16,"send":0,"wait":16,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/css/base.css","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/css/base.css HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 09:50:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3034\r\ncontent-type: text/css\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13693,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5e66ed24a151011a389da90ebcf153b2","sha1":"22641b4a600d846cbad2085f40feae2acbdaabc5","sha256":"1d9aa8080f9e877e5143616c657267e1bf745942275f96000dfb8aa562d1292d","sha512":"e6b82dc82f5f49af1ee392c18a789bdefde2642d55d86cda6f5291988e9dd0992934ad103dbbca417ad6f6deb9c7d73c2bf21cbdc0b9344f33951ecd6ace3c02","ssdeep":"192:MBbcQ2GGDWypz9TV3LHQFvAlsJqTD3W+t/fu:MMVwqTD3Wt","tlshash":"dc52026daec95d0f224ed4c0ebf8b1e4fa1860899d691db4b59d7738e30d1b4202dbc9","first_seen":"2024-08-20T12:44:53.513193Z","last_seen":"2026-04-06T10:10:41.387621Z","times_seen":591,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/login.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:55.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/login.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 08:20:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 424\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:55 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"47e5e2303fca8b31ed4fc0e4592eb05e","sha1":"926791b0c9bea9eead7e6b7e596f078907bf2ef1","sha256":"ec2716d4c90cf8b58b22978f562c937382d76f259fbd5a82b2738ab6ccba0b51","sha512":"023ec0b4cc3572cd71b7b9232a1214311e29d9e25a5cc2c86e7aea248222d87caee50319dd9b657e94a358aca87672bc3f8aa1c4c046affba6b42514d38a06bb","ssdeep":"","tlshash":"f8e02393d366674aac2fe374071814218c07b615b70d505f6844e8122e1977839d5f60","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.497676Z","times_seen":760,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com/favicon.ico","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 06 Nov 2025 16:28:56 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 04 Sep 2021 08:28:12 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-08-10T23:14:36.376387Z","times_seen":14081,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:56.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ee7b1f1bcc3733c1439403847f33b57c","sha1":"031559cf5be39fa10d5f15ece2b768fe0e5f2b00","sha256":"8463267d00381b0b3ecd446c840505575a8afc4d89c5a0bdef011352d30760a5","sha512":"797eb5806a3ed930eb21bbffa62932f2e46f057fbc3c9bcaeba32dc52daee9d1ec5e99a40740a0f0e4969885f4e61e8517a64981d6640e09d11de0228be70433","ssdeep":"","tlshash":"4fc02bc808087e98c088007792c42128e4b05041f2ee757036453084308ac049750cc0","first_seen":"2025-11-06T16:29:24.84024Z","last_seen":"2025-11-06T16:29:24.84024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2025-11-06T16:28:56.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=7efa098e3483307e\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:56 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 7efa098e3483307e\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=94\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":222273,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6931)","md5":"49ed580f278d9b18c32496b36356c2db","sha1":"ccf467e2bec3fa2f5aaae9bd45051c3e329b4daa","sha256":"d356600b0b3b5397fa132a0e28e407e69e50c9a223e140aa21f1a24098b1586b","sha512":"70538e75aa8a360ea8a9f6cfe6a618480fe90aab4ba7956b5c86a3e6873ed9121d40a56e8bf711e843f0e70cd8a0c26b9421e85a249c5df01fafb104405259ea","ssdeep":"768:BGotaLIKIdWgHJJMe31URWY+u9Mtt0yWrnZgY+uQp7Vpo:BGrLI18gpJ2r+umNuQa","tlshash":"f024aadb9fd0907664ed1dc1461d48cf723c94bb4b488139e104aeace8f2654e6e7cea","first_seen":"2025-11-06T16:29:24.841651Z","last_seen":"2025-11-06T16:29:24.841651Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5950/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5950\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qyXNxImchHUKOz9+I5jkEQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5931/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:00.938Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5931\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://greenearthfze.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7NKH1HeCBl8vG96Vcn05OA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026je=393b3e242460607e3f31266863633d312670657e3f31362e36312e37312c3134243d312c30322e3d3b2c313b2e35382e343a2c3d3b2e30312e353b2c3a322c3730263d3a2e373b2633352c373b2e31362c37392633392e353a2e37312437392c393e24373b2c333c2e37392c33322c35392c31312e353a2e36392e37312c313b243d302c3b342e3d3b2c313b","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:29:07.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=6AB38890CD864C7B11942072C581A819?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=7efa098e3483307e\u0026je=393b3e242460607e3f31266863633d312670657e3f31362e36312e37312c3134243d312c30322e3d3b2c313b2e35382e343a2c3d3b2e30312e353b2c3a322c3730263d3a2e373b2633352c373b2e31362c37392633392e353a2e37312437392c393e24373b2c333c2e37392c33322c35392c31312e353a2e36392e37312c313b243d302c3b342e3d3b2c313b HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nCookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; tmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Thu, 06 Nov 2025 16:29:07 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":39,"dns":1,"connect":16,"send":0,"wait":17,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-06T16:28:53.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/index.html HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 2654\r\nlast-modified: Wed, 04 Jan 2023 12:33:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8968,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (459), with CRLF line terminators","md5":"6acb579099ef609074281b9620c947d5","sha1":"b90cebed8070d059951d37eb065ec367b1d91d3d","sha256":"81a8fef4a4db6eec563fcb36d330f66a6f7824189fb6aa86b052879de1cb5bb3","sha512":"ac9f67e5d219cefbe1930db37232ef6a1c45d36ae935207f51161727ecb30ed9040f5cb0bb90dec71af14012e210a62ddb3d5f798de3c8d004f98fd6ff9596c1","ssdeep":"96:saQLUoFPXi9tZ9tA7yQR7wy2lEFaNBo2uzC44NiNOHy59vNroRCQV5gFke3G1EH6:saQwnRA7yQRMwC4UyEpLIUT","tlshash":"fd124460aac4fb0b013ba278d3715ed4dfa2502f87124c48f45e259f2f786459e676bc","first_seen":"2025-04-12T17:45:41.345904Z","last_seen":"2026-04-06T10:10:41.373899Z","times_seen":587,"resource_available":false,"data":null}},"time_used":2062,"timings":{"blocked":910,"dns":584,"connect":162,"send":0,"wait":236,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/tags.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 20 Jan 2025 07:20:08 GMT","end":"Wed, 18 Feb 2026 14:59:00 GMT"},"fingerprint":{"sha1":"02:CF:D8:62:5D:7C:C8:28:52:BB:68:CF:71:FC:7E:22:96:E2:87:60","sha256":"D8:A7:A8:24:48:46:DD:9A:C7:0B:4C:89:9D:C2:90:7A:2C:6B:CC:AD:06:72:31:77:DD:96:05:06:D3:E4:F9:F3"}}},"request":{"raw":"GET /fp/tags.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 06 Nov 2025 16:28:55 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 7efa098e3483307e\r\nX-Robots-Tag: noindex, nofollow\r\nP3P: CP=IVAa PSAa\r\nSet-Cookie: thx_guid=1814bb1d0c77c1e5c98bea13dd759c58; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None;\ntmx_guid=AAwUEeTi4Ai9-R1OrGWdIiExIwNeNcUV0G8iHJ3qXuSR--2ZfARhH2yqZaM5tsWdUCQpptCSkq7WpmByBQXCyKDg9i7BGw; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None;\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16159)","md5":"52fb1a03e798d7e89f9e6d69b1c1cd69","sha1":"213c73576008960de131c2f92f60e317ea44f984","sha256":"b358d54f851e12461d75c6687c6de92bd89e1bf43a04f255fd04468c7ae1be5c","sha512":"b7a2a47e491358857f6a354f26a3c14eef594deb51c2b2f80ba948fbd5d538807aa23ed78265805af0cfabc77337b54281a326dee9b22f946fe05d78c3f78b54","ssdeep":"384:kJEhZFdEPf0QCooQZwFgXTJBA2bwf9vsfQLObfbZB0ma5h3wXZlzALVQX35DQGrS:YTHAQlfIFAAPQPsJJ","tlshash":"d2a39dd815e09513493b1ce0996e094f363d7dfa834466ea9004aff892b9780f3dbed9","first_seen":"2025-11-06T16:29:24.844886Z","last_seen":"2025-11-06T16:29:24.844886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2007,"timings":{"blocked":984,"dns":307,"connect":16,"send":0,"wait":20,"receive":11,"ssl":666},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/js/common.js","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/js/common.js HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 10:36:14 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 846\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2505,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"281e8c1f17e088af04db94299eb03643","sha1":"266ad99657da73e8dadd96a63ac4cf03a66cde91","sha256":"a5305ea918ce512a010a07d2e50bceb701a099235e28c62061177c008d8816ad","sha512":"1770936d8221c143cfc2e37ac072265b96935f092876e00fc0f2f2bfacc97d83122130c2aa110ac0158fffa35e2a4355baaea49b9ecd5d7da894686afabc5124","ssdeep":"","tlshash":"e55102cc0fa38d794a62cc15e67718c1fef05d62aa31f010f55db299248cb76016cdae","first_seen":"2023-11-30T05:57:03Z","last_seen":"2026-04-06T10:10:41.339919Z","times_seen":569,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/loginfoot.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:54.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/loginfoot.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 09:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2084\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 50","md5":"f18ea3b398955ba4080beed42679e55f","sha1":"2d4b5004226d17f2dc1ca235bd70c7457e818644","sha256":"34e87afc825b9f62cdfcc89db23898dfe09151904bca4debdb9aaef7d2cc4dcb","sha512":"f83ff10b8ceb61040ac3818af6de22663a978f4a9f80d0a3661f12052445817108b97e27103b050a3844656ad931b73e5a53901f4f197d361c38a0c9b8f53930","ssdeep":"","tlshash":"0f414a44501c4da8877b8bbf68e4e7c02e2b7d014ac44130bdb8345b73298973b64ca3","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-17T01:07:34.497142Z","times_seen":671,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenearthfze.com//ACCOUNTUPDATE2026/Sites/sso/pf/images/loginmiddle.gif","fqdn":"greenearthfze.com","domain":"greenearthfze.com","tld":"com"},"ip":{"addr":"45.113.122.52","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html","date":"2025-11-06T16:28:55.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenearthfze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 11:50:25 GMT","end":"Fri, 19 Dec 2025 11:50:24 GMT"},"fingerprint":{"sha1":"90:1E:C3:C0:0F:2A:1C:62:10:35:32:8C:71:7F:C1:29:E1:F6:72:33","sha256":"81:EA:D0:33:24:06:A1:CF:C2:95:06:4C:0B:C6:D7:6E:DF:04:9F:81:9C:20:08:0B:A9:93:0D:10:83:94:7B:11"}}},"request":{"raw":"GET //ACCOUNTUPDATE2026/Sites/sso/pf/images/loginmiddle.gif HTTP/1.1\r\nHost: greenearthfze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://greenearthfze.com//ACCOUNTUPDATE2026/Sites/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 10:33:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130\r\ncontent-type: image/gif\r\ndate: Thu, 06 Nov 2025 16:28:55 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":130,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 5","md5":"055cf0e751968aa1eaf4ab26b6267caa","sha1":"1fd229e193c7bac7dece4979e4211bef5022bb0e","sha256":"4e6fff51beaec33a7639e509aa82466c31cabfdf23ea24850edb76d873596b8c","sha512":"970626c34cd8ea720e109e7eb22c0898e7d971afcb8a69ff78f093db395aed14ca2fb1dfd3535cd4d2499137889f2550477b2f14123016e45990b3dc1abe1f74","ssdeep":"","tlshash":"34c09b6dc860642b504d75734417e1cd760947e85c0618dad5756595a5086b1f6301d9","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.233641Z","times_seen":636,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-06","alert":"Phishing Block","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-06","alert":"Phishing - NTT Communications","trigger":"greenearthfze.com","verdict":"phishing","severity":"medium","comment":"NTT Communications","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-06","alert":"Sinkholed","trigger":"greenearthfze.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}