{"report_id":"6456241f-975d-494b-b152-fc3a9591cee3","version":0,"status":"done","tags":[],"date":"2026-09-12T17:59:33Z","url":{"schema":"http","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"title":"Dental Billing and Coding Company | Dental Billing Service","dom":{"size":882999,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4e8afac725b130a00deec47eac120b1b","sha1":"9c2b8d805ce761590ca04d24499f49823c469fea","sha256":"207549b4906e722f44c096fd6d7317860bb22510efe7ab85782f8f61c0345de9","sha512":"a8cc8b49779c8b3b3a0da01ca91e5d8502924b64a517a57a03d8ab87fad1ee5a79ac0b5481572886e70323ead91a1e2a323e1c5eec141a0e8cba0dd9c682a012","ssdeep":"6144:mCmuuL23E82xGNl5UT1GPpq+ewq/RLrEkFRByg3l:qGPpq+el/RLrEkFRByg3l","tlshash":"f415e04faf7035b03543f390aeebd76491a49183d905ec817aace6446f8625a8df12fc","dom_hash":"domhashf0581f6391c7bf52604b2f32063a1399","first_seen":"2026-09-12T17:53:09.125118Z","last_seen":"2026-09-12T17:59:36.616067Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T17:59:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"greenleavez.com","ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2022-11-01","domain_rank":0,"first_seen":"2025-07-02T12:03:59.413855Z","last_seen":"2026-09-12T17:53:03.336375Z","alert_count":30,"request_count":15,"received_data":2478847,"sent_data":7344,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Mobile","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]}]},{"fqdn":"www.outsourcestrategies.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2003-02-18","domain_rank":6002690,"first_seen":"2013-05-01T22:51:01Z","last_seen":"2026-09-12T17:53:03.275325Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1135,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.shortpixel.ai","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-14","domain_rank":337824,"first_seen":"2018-09-25T22:52:14Z","last_seen":"2026-09-11T17:15:29.840253Z","alert_count":0,"request_count":6,"received_data":95063,"sent_data":3562,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":17,"received_data":440555,"sent_data":10128,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e78a848c752a815609b961ff11c15c5b","sha1":"c9a3f467c89a686dbbf6133ae2c60f83bcd3cbb3","sha256":"c17b60d85b6172a423d2f2b4b71e6d9f88cfc63df1d0d5f47bd6eeed08fcc5e0","sha512":"5165570ae912dd51af42698bc2986ede158ef4862faa3b88dc5b02415619f32178147af9982155564fe9ae7ea2fe19607526f80b77af8a075cd3182e33420cae","ssdeep":"","tlshash":"5a11d69d41e5142a16e338381c65725a397340a7a20e7881f94ca9d19f22b3d4ae7fc6","size":913,"data":"","first_seen":"2026-09-12T17:53:09.179332Z","last_seen":"2026-09-12T17:59:36.652502Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"283fd29c8a0f1a71c04e43d9505ebd87","sha1":"5773bf86e14e97bb9385508dfe4155ba0703a03a","sha256":"aa43148a138339244df3a1d0a10d58495755aeeb2090f9c4608608376c38ce6d","sha512":"a2b52c7a35974234da72204125ef3056b5103dae6e158ebb5d3723d50579abcf6cbf72b7f35676db8a9a43d6fda1a749ce80b4f35b4ed68b6f6a92515c6c2696","ssdeep":"192:KIIXECr4uiGKbJlUtb7Jyegxgtnb51Xes7JEJdkohC4VAzTTEtPwkApdqZ/F2cOQ:PW8xQ1ldwCxmx","tlshash":"4a72016a67f6083126b3b2161f3fe7127232509b18429d983e1ccac95f0c96e59f5fa4","size":17207,"data":"","first_seen":"2026-09-12T17:53:09.181123Z","last_seen":"2026-09-12T17:59:36.653837Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba5a44f461d5b2e140686fe6c1b239b9","sha1":"3315bae267fce90006b889d0b7eb88d72e504798","sha256":"36d41b34b9ef3d6661aa92885e3ffb15d311633aa108b73301ee86ff0a18c2b7","sha512":"7ab6904c92e8de7911a331171666a131288452cadc7f425aa7986d059f8ef9dfbc6cfa8f91727902134038bd142666e520db75feca44e886957266bcc93e0688","ssdeep":"48:B+Pga0nGvdJVgnM2D/eL6pFoNAnrvQt8VZBvd/q7edl8bE9ADSdhu:Eg6MzDBpFoNAnS8V7vd/q7edl8E8S+","tlshash":"22d1cb1a25e235b150a3f0789baf9c452a34611baec8fd013f5c93945fad03da3b9b4c","size":6158,"data":"","first_seen":"2026-09-12T17:53:09.182387Z","last_seen":"2026-09-12T17:59:36.655028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1600908dcbfe90330a6de490c58c9777","sha1":"8a15d465c8503d2fb96ff49ea1660cb1fbabcec5","sha256":"0116c80dfcf256b0770bfe992793a0fc438820ad45934ed93b0912ef89d71ebe","sha512":"f7222418419307b2a1a47aa6c18af8be67d31d5f457a8930468f3190c25b7bc5bbf04e2ce7467a9442f3ae546d5dab545d8d5c123796752ceb9f2f42fbb04980","ssdeep":"","tlshash":"55c09224c98245411861156ab669a0012a82128b996e96113f9ca91e4f4a0ce84896ec","size":136,"data":"","first_seen":"2026-09-12T17:53:09.184509Z","last_seen":"2026-09-12T17:59:36.656417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab4db8be4377a75b9f37e7f6913ff285","sha1":"5813a913fc298f7380c6eeb7ebfbb8ee650ea614","sha256":"909d97da46c6a62524ba4986dafbd4c0cd00c470ed06eee9903df896c8639931","sha512":"205ce2bf2e07b2990246815d70fa0a9bcdb894308e743a978a32e0731123837fa7061e5e67af8b5aae53a1c2f417aad946c2278dc4db19a86047bda6386b1738","ssdeep":"","tlshash":"6451d01b04b514b53b1ad836117b1a00a226c2cb9ea6fc117f6c99381f0c55f19b67ad","size":2622,"data":"","first_seen":"2026-09-12T17:53:09.186302Z","last_seen":"2026-09-12T17:59:36.657547Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"92b2eccfa42a2ae534da07fd29225fe1","sha1":"0b4ac14c1e0628c1513db57006e844da348884ea","sha256":"17feb2b47825f11a1f0fbbf47f0802d1198b8988b82a7b69f9a1cf1739c477db","sha512":"834688948605f699160de132f647a486d2695ad6a4576a6d9635e6d7a7f8de390380f452062576ba6aa1be782ae4e72040f50f0abba9fecb27ae2a183267fe41","ssdeep":"","tlshash":"633168ba2619912549c399b2f4332b23122161c39ee43cd1b7ad04682f4c19f95f772d","size":1478,"data":"","first_seen":"2026-09-12T17:53:09.189572Z","last_seen":"2026-09-12T17:59:36.658691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"847b49ca5ecc50111f28825bc7f853d6","sha1":"09ffe04721863a2ee6ee247cfa05d974d0638833","sha256":"53f09b97ccd9cb61d3385feab4907cbd512225511318f5f5c5b2900e0fff3d3f","sha512":"c7979b96081de7f04761fe35512fc43df0687c6493f74541cc6cd615f7854da8bf7fe28b4d5d23313532523384923aa34b40f2ef42e382ed4a465a4d2d2f96c3","ssdeep":"","tlshash":"2bf0c0c265894410100050f92f20d9366bd9580f8c16c510bb0c61a66f0da5eb0be9bc","size":622,"data":"","first_seen":"2026-09-12T17:53:09.190875Z","last_seen":"2026-09-12T17:59:36.659789Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9daf68ddb7b3fffb062e3a7bfba34971","sha1":"cbb24e29ad9c649ea7d0963a968092ceaa8d9157","sha256":"b187db696713c15587b81f83a9ea15e8735570769776aaf01ac5822d832bbc33","sha512":"f0c52efbc878c6cf6992a3fac838f191a3c3ee63f69e93b565096d6835794b9c6ae4e9188ad70daacfde83febacbd0773bcc3a382c8a09a81a3aa2ce460f46a6","ssdeep":"","tlshash":"ba51245ac84659210ad200595d3fe302f2a201ab5d44fd587f8c61550fcf0afa2ffb8d","size":2496,"data":"","first_seen":"2026-09-12T17:53:09.192179Z","last_seen":"2026-09-12T17:59:36.66077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89fd1f1c46056fdb84ef3197ca33cbbe","sha1":"0840592903c64903816b21a6eae12f7ec394fcb1","sha256":"a6dbdadb4d8042de1a7439032b25c1f00044eaacb6c9a4d4747f38d8ba832635","sha512":"7358c15b40684955181ee2153b8e0f8615082ab75bd3c55622437db2f7868e252e75d39509798b7ecf47d9fe5fb0f5edfff6081a36f8b9e6fccc5ffc313d7188","ssdeep":"","tlshash":"a4d0800468ac104112d65165711d512411865f4f0905e5547f6c60510f16d8fc467edf","size":219,"data":"","first_seen":"2026-09-12T17:53:09.194283Z","last_seen":"2026-09-12T17:59:36.66176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6abf066da03ff15bef0d31ee30683c12","sha1":"1f4a482adf16090f7892f1e7984138ac40d8d158","sha256":"1414e169b809ad9a3fc27e9a47141a5aa1b64edd2a3e423e258357454adda208","sha512":"c8d1a7d0837b68fa2aab8e9f37ce323d8913c575ee2c61b1b886394fcc7e04d54d9ecd3124154710504ee4f952720a4ca872bb4271c106be82397dacbd7a0a7d","ssdeep":"","tlshash":"1ff05c2f4c0a8b4d055190d03c3ab6199482a60bec008bc0bb6c10a91f964daa0f54ce","size":507,"data":"","first_seen":"2026-09-12T17:53:09.195525Z","last_seen":"2026-09-12T17:59:36.662781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7781dbc83151e0a079ccd8ac99ef4fba","sha1":"9fbc6edc1978387a49c52e5e624a9e759981cfe2","sha256":"b384e15d9a0a13d9fd617e763fc14e4d6756ce2e3117b888ccccb95355997994","sha512":"b6676b00359f47bab06b70e89fc331a2d7c9ad1184dce7ff97f352c0b5f929eb267968d5213e8618d518607f313c10e50d15687f7f6b0613a016e554fbbc106c","ssdeep":"","tlshash":"9d11c20e6b753d022003a0a1a1bb8215a3b504cf1ea57c707f5c53525f5d05f80b6a9e","size":1079,"data":"","first_seen":"2026-09-12T17:53:09.197749Z","last_seen":"2026-09-12T17:59:36.664506Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa661327f9bad0357bb725494163227d","sha1":"01a5067ca701c03bd241dee3c5dfebf149c11a63","sha256":"695d30dbdc56b792a1592c8748591b2b28e8e6ee8ac60e5f523a9b69a5d722c7","sha512":"f9163eacb599ba91874575ac832612d28f5ed53cb4cae532cbf84df51762e3e477f3b6fa3f18c358295d626c40270d94152f7ad35fa83ad09d41edeaace07db0","ssdeep":"","tlshash":"5e8171da25bb804bb867302617bf110e7530945b2e00fe11beacc5964fa496b17b67cc","size":4069,"data":"","first_seen":"2026-09-12T17:53:09.199989Z","last_seen":"2026-09-12T17:59:36.665824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8af4d13640e8b049c721adcf32873418","sha1":"29c3dbfc6d73f67260b46a1e7e063f7d8435e13c","sha256":"74c77cb364282a7b05832304482e441628ffd9a472ed4588f915826f34ca3756","sha512":"65585dec7dfd0c11b083713e73ad2e6510a0ca8757812c2b1a7b4b0824109a6c08b1d7abd221530c8d1f1bcb769281aadc954fb2703d8a24f94552ca9be85094","ssdeep":"","tlshash":"f6116d2d6601573856a37d6943ae7b01bae63123ca18f412bc6c60605fa9ddb50fcd81","size":907,"data":"","first_seen":"2026-09-12T17:53:09.202615Z","last_seen":"2026-09-12T17:59:36.667044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/assets/js/bundles/spai-lib-bg.1.0.min.js?v=3.5.5","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e45fe99e3c86421f5e51fc82cde9002","sha1":"68f88830cbc7355588cdf2f6ecec010d942ccad9","sha256":"860be5d0ba91647bee9b7116554042c3b2a41d9f181d75495b80577ba62f9e6c","sha512":"9875adfd7bb45a1df9bbf106e1a9ede1b85584463e59f0769649b70ffd6d7a41d6bb0b6040df48cdada387c7a093bc60164791b62be416a6d776b2c8164b3b9c","ssdeep":"768:ApOj+cYxNsC1MHvhxvCDyvgwQyccXcITTtlEhFHR3KZ0lwqgO:AwihEhHv0IgwQonEzl","tlshash":"a913e7b97380347b97aa0257982f0104b12a6958564bd90cb73c74f7b998d8f31bfb36","size":41536,"data":"","first_seen":"2025-12-01T19:07:01.700002Z","last_seen":"2026-09-12T17:59:36.634242Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/js/lazyload.min.js","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00219cb958052cb557115d55f0c8d48","sha1":"3c55bbf5a8082db61decff924aaf787f4337df86","sha256":"8ceb3992861ed1fda25855c2e500e76842ae0d788405e50e3a9f45df36499cf6","sha512":"8551b616ff3abb64a5a63e68f07c82d72bf89cff6602339f900e282d3d0f8e9781a6361da024f289105f971f4c56c6a3c4c9dd33627525462fac6319f6f0435f","ssdeep":"192:pDvu5/lEKbR9plcliHYecexZno2fa65gIe2vVYAtW1eiIvO1SF:pTw/u6ZjyOeOe4F","tlshash":"6e0221487d41742f2933f0f2515f12ca753b28426ced6954a6e1f5e82d7848d28a3fbd","size":8291,"data":"","first_seen":"2023-03-07T01:07:43Z","last_seen":"2026-09-12T17:59:36.628269Z","times_seen":6322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-13T04:08:23.330147Z","times_seen":200965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.424Z","timestamp":1789235942424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22212\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 393\r\nlast-modified: Mon, 15 Aug 2022 18:15:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22212,"size_decoded":23022,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22212, version 1.0","md5":"e62adebf67147c481b9c00011e2c5d48","sha1":"3af42ef356fa413fd162c56a7b11b8d34a61cefb","sha256":"17ec0c20d179cf39cbbb164c18165e8a35e9678d5602c8c4f6826ff457b0685e","sha512":"3aa2d282dc613de10abae8b7171e2736249386b82a505f2db929efa521f6a18b0a5f4e3fbbe600e6ca593ee8d07e3b95f8abb80b15c15edcab4466a3cea125a2","ssdeep":"384:CtUbLdl7kLYc9ymLMkN5wTgRl5UpGNBdiarz9Eizvb5gzmeLzxC8k/4:PJWNPMkNuT+CpGZtLzjizNlk/4","tlshash":"10a2f122a199764fb458c90b52e23ef33db323f86f540b78780d162a7782410c8d61f7","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.618279Z","times_seen":193,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBiEJpg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.425Z","timestamp":1789235942425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBiEJpg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Aug 2022 17:55:27 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27720,"size_decoded":28530,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27720, version 1.0","md5":"d31e91b24487f4174e99d8aa388254c0","sha1":"54b6fe3d22bb816f8b9536546bf3383e49493170","sha256":"4bdfeed5d2a35d05da63d16cf9226a0a76652476e1e92e8b642be350a2ab614c","sha512":"474eb1144605fa66d272f23d19c38a1e103997fac0375369b4b47677a64e4ef89d1c88c3d5823989a832d186373fba1cc86d2e9b3367b323680a623ab05f912b","ssdeep":"768:bDp+HhP/oqKu/QJhq8NVfgO29TVQxWfsdQJpbfWOoZ89Ftd:43oqKu/4h1NVfgO2Y0JwZ2","tlshash":"60c2d0b48682e7ebcdc1537b9c91672ce3bdb6544637f60890c62371f9a68f9281523c","first_seen":"2025-10-24T02:19:09.688165Z","last_seen":"2026-09-12T17:59:36.61895Z","times_seen":5,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/style_frontend_pro.1.20.2.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.448Z","timestamp":1789235942448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/style_frontend_pro.1.20.2.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 02 Dec 2022 13:01:16 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 17514\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":118678,"size_decoded":17764,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c2b723401fdd2a8f0c46247157e7ab33","sha1":"2b5b67cc78d03c80638ea986d6b20297c9db3415","sha256":"657a04c59cdfb263d9ed43f9a8bf46ee4aaada899426b9050b43d0fee268bf00","sha512":"f1447eea895fad56324c062fc13c837cb403b4da0a1a4b6975f1d5c735bf7e1ba7fe1a104629210af68db31781382d8d94bf83276c486bf13530cc0aeb9b71b0","ssdeep":"384:lOWnfW+KoLuwCJl0i0hreNXp0i1I6oPgdw+if17PKIGHaL13X66I8zDBw5uIoYMV:NnSU2I6oPgdw3X6+eJz3MMXOJ6oCW","tlshash":"24c3d2d261b05c58137ebe28530a320839a9215bbbf317fe3691a3d803f5d981d9d6de","first_seen":"2026-01-10T15:20:43.353649Z","last_seen":"2026-09-12T17:59:36.619979Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321","fqdn":"www.outsourcestrategies.com","domain":"outsourcestrategies.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.637Z","timestamp":1789235942637,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321 HTTP/1.1\r\nHost: www.outsourcestrategies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nReferer: https://greenleavez.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBiEJpg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.427Z","timestamp":1789235942427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBiEJpg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28224\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Aug 2022 17:55:31 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28224,"size_decoded":29034,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28224, version 1.0","md5":"6c16bcf8753c4c981675bda77c4b151c","sha1":"d3727bc44e08c944190baf9b1463e57ab9df7b4b","sha256":"cb5ac5d80589f7dc1e59b62cfaabf7d9647e2b6b153ab6f0c50c191881c5bc0f","sha512":"73ae2b67e3f53c7d73c07ab20a6cd79f28ceeac3f9f5cca7b4301c36d5fb484cecc2c5f0ccdd35d9988bf816c86d7cb271949be1fc895c9807f89ea380f066f3","ssdeep":"768:rOMJu0jWV02v5i+WxI+na1mUbv6qzD0IYSl:iwjWPBi+UnktNzYzSl","tlshash":"6ec2f1199f4645ade77cdb001e9a01c0cb50af5ac0c31ef61663857b7f971db966603c","first_seen":"2023-05-24T05:37:56Z","last_seen":"2026-09-12T17:59:36.621788Z","times_seen":10,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/images/favicon.png","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:03.276Z","timestamp":1789235943276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 22 Dec 2022 17:21:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 164175\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 17:59:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":164175,"size_decoded":164380,"mime_type":"image/png","magic":"PNG image data, 513 x 486, 8-bit/color RGBA, non-interlaced","md5":"c27829df9ba368d3a8c4cda049e9c7e6","sha1":"f276a9bc99b4db03454e558ac99069b0d43c6b77","sha256":"53c4fbe0f9cb374aae3ac8e9fdc9c4acabe083611dbd449b94b53240f3ca8330","sha512":"73f4950c8b59fac519fe16a5c56a481527a860cfff7e244827d164d3323453501a93c9a1d0fbd874c93b5ee4843d04d2bb4af60ec9663dd33c24716fd54c138f","ssdeep":"3072:EAzT9Wdxn4YFj7LRYwGAttf9suaWm1hmGUJRmkYNb:384+3Le0tnOJPf7kYZ","tlshash":"59f312ac91522fd0b295c86873af24b51df6488db38de0ba098b1716f1d0fa3c8f614c","first_seen":"2026-01-10T15:20:43.325002Z","last_seen":"2026-09-12T17:59:36.622419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/images/favicon.png","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:03.278Z","timestamp":1789235943278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 22 Dec 2022 17:21:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 164175\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 17:59:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":164175,"size_decoded":164380,"mime_type":"image/png","magic":"PNG image data, 513 x 486, 8-bit/color RGBA, non-interlaced","md5":"c27829df9ba368d3a8c4cda049e9c7e6","sha1":"f276a9bc99b4db03454e558ac99069b0d43c6b77","sha256":"53c4fbe0f9cb374aae3ac8e9fdc9c4acabe083611dbd449b94b53240f3ca8330","sha512":"73f4950c8b59fac519fe16a5c56a481527a860cfff7e244827d164d3323453501a93c9a1d0fbd874c93b5ee4843d04d2bb4af60ec9663dd33c24716fd54c138f","ssdeep":"3072:EAzT9Wdxn4YFj7LRYwGAttf9suaWm1hmGUJRmkYNb:384+3Le0tnOJPf7kYZ","tlshash":"59f312ac91522fd0b295c86873af24b51df6488db38de0ba098b1716f1d0fa3c8f614c","first_seen":"2026-01-10T15:20:43.325002Z","last_seen":"2026-09-12T17:59:36.622419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVQ.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.438Z","timestamp":1789235942438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVQ.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 16:04:45 GMT\r\nexpires: Sat, 11 Sep 2027 16:04:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93257\r\nlast-modified: Mon, 15 Aug 2022 18:14:58 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27520,"size_decoded":28331,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 27520, version 1.1","md5":"cd247306809a5a4ddcfee4e2681aa03b","sha1":"1aaa3efe7fc2cf5ccd75d4c67e1bf05e5041af3b","sha256":"925be42fa3c0ca5ea75cd203804c3f6c717407e44010e1b63ed2c951bacc1849","sha512":"0d2bb2bc74918d7a0f1ca39e53a3e35d9e4677587744570f3efb3e3ce917c4184acc97ea86c585f8e83f25ecca6f6de6544b4691299e3b3dda3b3c2a2238aa3d","ssdeep":"768:f4d4OvszoWxn742ADx9Z/UTE9q0Xqevt8Zg66i88R:ACOOoWx742At9ZcTEoaqevt8OTi88","tlshash":"2ec2f1d7e915b387e9e06273e19bf3f104a23e9109a6ff937c5acb591a63120088d062","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.623034Z","times_seen":46,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K8nXBiEJpg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.442Z","timestamp":1789235942442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K8nXBiEJpg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27648\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Aug 2022 17:55:24 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27648,"size_decoded":28458,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27648, version 1.0","md5":"eeebff830efd2003006df104562568a0","sha1":"def7bb50554d4a39d6962efe2ef74cf512f48f28","sha256":"d17214e1cfb6900e670d005157a92c0dd5c5a0a0df2c0e2b28436f6767170c64","sha512":"f14d2f9a417b33ec95fe7fdbbe8754000ba29268349adb5c365205bce3f2092094f9744a0b3f4ed748574aee171d500df7f1154cdbde90e502c1b7b23b96432c","ssdeep":"768:UcWtWvxW4q8LGTV4hbtdqJ05qJgLRGeu/YEAXhlgW8EbSkTt:UcWt0xAsIQbtdCequPPXheWBbSSt","tlshash":"b3c2f1209c683bf5d74b83ff5e394bf39e424e7905c142a3c6d3743aaa904a2245b529","first_seen":"2025-10-24T02:19:09.707429Z","last_seen":"2026-09-12T17:59:36.623718Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkxhjWV4ewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.444Z","timestamp":1789235942444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkxhjWV4ewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23676\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Aug 2022 18:28:12 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23676,"size_decoded":24486,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23676, version 1.0","md5":"ea830d57b828773890ac377a6ba9f2f6","sha1":"dc5bfc249509c6c1868b1259dfc9dec43d68893b","sha256":"93b2bfc7bbbcb74174ce304aad5aa787d591ed3e1f717fa949cd3a50a626a145","sha512":"9522a362e92fa45e290cc79637396ed52548bc7964e9e1d5b03a93d4060c0d347895334d53bf766d5f65b8d10fb7d6c255a108d85c7505002b576bae69520f71","ssdeep":"384:inTf7TA4f8aFapEhaQIsv7ynL6hFp4JzdaNEtoRWlsMB9REEd3T/M1Mzh36NT:iTPzf36tQl70gNaYWlpnpTEu1k","tlshash":"7bb2e1834c4c98a087d9657091c2b4726edf0f2587ab551fdbbaaf1ae103d49660dcf3","first_seen":"2024-10-18T08:24:15.012304Z","last_seen":"2026-09-12T17:59:36.624308Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v12/jizfRExUiTo99u79B_mh0O6tLR8a8zI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.420Z","timestamp":1789235942420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/ptsans/v12/jizfRExUiTo99u79B_mh0O6tLR8a8zI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 15:02:16 GMT\r\nexpires: Sun, 12 Sep 2027 15:02:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 10606\r\nlast-modified: Tue, 15 Sep 2020 18:10:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11504,"size_decoded":12316,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11504, version 1.0","md5":"645c24de764a627166417d9eb1f2ccf0","sha1":"1080d009b29ba275e101018fd7877b3ea62e701f","sha256":"bb74816a9aaed49f7b58ffbfead623f50686271a551d77a3ed95a56a56e40dbf","sha512":"cb15e11c154a5636a6be7cccbc5aac46f979ea6dadad6ceea6455191b72bcb0ebadd758d8f52b07be20a607d0350b27d4485fc48514e129966d4e03f5f11e94a","ssdeep":"192:n+YHPVFMuNxBRWpQk1qP+kv9mcSorGyvNiU8Jay04V0T:+wFMoWOMkv9mE6yvkJkdT","tlshash":"1932bf2c788909a2ff4f0d31899a16a397e3985fd000f5555befc40dfbc1e5d89a0768","first_seen":"2023-05-12T03:48:49Z","last_seen":"2026-09-12T17:59:36.624891Z","times_seen":75,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgshZ1x4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.443Z","timestamp":1789235942443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgshZ1x4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:46:42 GMT\r\nexpires: Fri, 10 Sep 2027 08:46:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Aug 2022 18:12:07 GMT\r\ncontent-type: font/woff2\r\nage: 205940\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22040,"size_decoded":22853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22040, version 1.0","md5":"dde07e1d5d0325a4bbb4a89f5c4460e3","sha1":"8dcc458f18816fade1ef35d0e4d2b7f0c7d99be5","sha256":"a024ed618250333de09c440f8a961f86e4a46bc8a553729367eb12ee64c56eb4","sha512":"509e65a836fd242123bb8a47a94c2fe6f0427cfb3552604d239dc4aa6a06dde4b1868a613b507f0676c23f1777c925270ec11e35a81c2996548ad12d93df9d4d","ssdeep":"384:48wvH2jJ9br6F8JViSAh4Je8By7AYwHn0Dy637eScZfsh2zq0qCSn6bWbCXK66:48C2jTrRJwn8ge2R7eGh2zq0FZW+O","tlshash":"eda2d0f4c7c394859c0db2a162bd523b641474aab18ecf3e927af4d795b28f9c143722","first_seen":"2025-09-28T00:22:15.96974Z","last_seen":"2026-09-12T17:59:36.625492Z","times_seen":16,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/sbi-styles.min.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.447Z","timestamp":1789235942447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/sbi-styles.min.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 12 Dec 2022 15:57:54 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4920\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24616,"size_decoded":5169,"mime_type":"text/css","magic":"ASCII text","md5":"88e47b05578a014378be8b6b72618625","sha1":"e48216d1ab07969e02e11bb29c11b7b956c7af41","sha256":"952c3f838fb360ebb3fbac46397001ae13fe351bc43e801195abf4b85cffe8e8","sha512":"a964e6459b58a42eb5b29a4fe5b99bbeafbb9b1ebeb4ead8f8994238431e0b7dbb15af227a045413a1a3ba1ceb43018394dd5123ce1fac919c79b3695ba15f08","ssdeep":"192:KMkMXDXAAdkYPz1+pxzcL3OiMF7Tl+rlB2grwnGdYydYwWK36OivyKY+If0VlnVp:B8ejFAVosFiFUd0FUUO","tlshash":"dab2ee995ad16f39b88e51025c89db7ea718e0b3e9f3cc667784601fc5caf60a033d19","first_seen":"2026-01-10T15:20:43.338907Z","last_seen":"2026-09-12T17:59:36.626077Z","times_seen":3,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/images/logo-greenleavez.png","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.497Z","timestamp":1789235942497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /images/logo-greenleavez.png HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 22 Dec 2022 18:16:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61262\r\ncontent-type: image/png\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":61262,"size_decoded":61466,"mime_type":"image/png","magic":"PNG image data, 936 x 186, 8-bit/color RGBA, non-interlaced","md5":"dd9c4beca11cfea1d8400c17ae7be2a2","sha1":"9cd47086d3206895863d5e103ba5cb4e239e4fb2","sha256":"caae37311e1eff30260f844288451a6089e253b4f3ce652aad9a2f0898f551c2","sha512":"9a593d08d7ca2f0145afc57b93040622b3ab65f43621289dc1c5f79b035b3cab2dd45e2f44768ef31a71257a5210c8a76412f1a78bc9526e39044e4f7f5b36cc","ssdeep":"1536:PWdjv1jbEyX0tWKwKjbjYai9daJp5LdRFhwCS7W6r:+hRbMtW0bIazeTr","tlshash":"c553f1a9b170cb0cdf5ff581efec85618d2748992e28c4d4d8adfb2ca8863395c254c8","first_seen":"2026-01-10T15:20:43.305252Z","last_seen":"2026-09-12T17:59:36.626701Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/js/lazyload.min.js","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.540Z","timestamp":1789235942540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /js/lazyload.min.js HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 29 Nov 2022 16:56:18 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3270\r\ncontent-type: application/javascript\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8291,"size_decoded":3533,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8290)","md5":"b00219cb958052cb557115d55f0c8d48","sha1":"3c55bbf5a8082db61decff924aaf787f4337df86","sha256":"8ceb3992861ed1fda25855c2e500e76842ae0d788405e50e3a9f45df36499cf6","sha512":"8551b616ff3abb64a5a63e68f07c82d72bf89cff6602339f900e282d3d0f8e9781a6361da024f289105f971f4c56c6a3c4c9dd33627525462fac6319f6f0435f","ssdeep":"192:pDvu5/lEKbR9plcliHYecexZno2fa65gIe2vVYAtW1eiIvO1SF:pTw/u6ZjyOeOe4F","tlshash":"6e0221487d41742f2933f0f2515f12ca753b28426ced6954a6e1f5e82d7848d28a3fbd","first_seen":"2023-03-07T01:07:43Z","last_seen":"2026-09-12T17:59:36.628269Z","times_seen":6322,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321","fqdn":"www.outsourcestrategies.com","domain":"outsourcestrategies.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.672Z","timestamp":1789235942672,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321 HTTP/1.1\r\nHost: www.outsourcestrategies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nReferer: https://greenleavez.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/spai/q_lossy+w_1280+to_webp+ret_img/https://greenleavez.com/images/home_banner.jpg","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.731Z","timestamp":1789235942731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shortpixel.ai","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 11:03:59 GMT","end":"Thu, 03 Dec 2026 11:03:58 GMT"},"fingerprint":{"sha1":"98:FA:95:A4:CC:C3:DD:76:26:D3:02:ED:25:79:43:23:E7:79:C1:27","sha256":"66:BF:59:C2:6A:40:B8:00:BC:42:20:03:6D:6B:DB:12:6B:88:8E:31:05:23:F9:60:23:68:90:2A:D7:6C:E8:D0"}}},"request":{"raw":"GET /spai/q_lossy+w_1280+to_webp+ret_img/https://greenleavez.com/images/home_banner.jpg HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://greenleavez.com/images/home_banner.jpg\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=43200\r\npragma: cache\r\nx-robots-tag: noindex\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://greenleavez.com/images/home_banner.jpg\u003e; rel=\"canonical\"\r\ncdn-tag: 0; Domain: greenleavez.com; 302\r\nxtag-sp-ver: 2-ns61\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 302\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053, 830\r\ncdn-cachedat: 09/12/2026 17:52:29\r\ncdn-status: 302\r\ncdn-requesttime: 0\r\ncdn-requestid: 41f58e6589c67f84f48a11bd1e22a18c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/images/home_banner.jpg","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.743Z","timestamp":1789235942743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /images/home_banner.jpg HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 12 Dec 2022 12:01:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114832\r\ncontent-type: image/jpeg\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114832,"size_decoded":115038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x912, components 3","md5":"a40ea1133ac0569211e3aa94f97c3af0","sha1":"d00c72125c05733cd06b133dc10d72ad76fbafd1","sha256":"365341c264395a0d3815d30c1b4970d786200103e6dd8a252ea671f3eb788a84","sha512":"60ce9c10d4f1e9c5b9cc265a918b2c26dabd42fa985d19af1357496f704f87cd4798c449c29787c15c2031a9dd3cde70a704ef38d5f619ae68eb45dbaa6b11c2","ssdeep":"1536:42oaQWPdkKsHCcnUOqjNg7P2EKwPDIFOOgOMpUmkh/vdOP4NrvZ3MMe75iDCz7o0:7dcUBjNg7P2EjrIQHSmYtOAN2Mm6Cnp","tlshash":"abb3121717c12696f0ed3afbeca27305eb26d08ad23ec757b6412532a6163a11ff4907","first_seen":"2026-01-10T15:20:43.329044Z","last_seen":"2026-09-12T17:59:36.629161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.423Z","timestamp":1789235942423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22084\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 19:14:13 GMT\r\nexpires: Fri, 10 Sep 2027 19:14:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168289\r\nlast-modified: Mon, 15 Aug 2022 18:14:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22084,"size_decoded":22897,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22084, version 1.0","md5":"bab4daa6bec06781aa7262eca0be0ed4","sha1":"b896fcea50433114a0433c9c8117677a875f1116","sha256":"ee901a5f44fcc6ea6ab97fb2751ce51af915d16dd99995a29a5905d2ce4b0831","sha512":"11ad082db1fe102df87f37d3dddc3707d2a478d063f351aefeac8be9f1fd02e9c7d16707a5caaefedfe57ec7ccb28ca1653504bc845df2603853a2d1d41c85f5","ssdeep":"384:37XM+zC+w2QMw8QzMzuERB/CDYwQMHib0J11tOqXPhXgG95M05imcTgbpCiIcxu1:Bz8J8DdaDYwQPGntOqXmAimcTgbpuNP","tlshash":"4aa2e1c68d73b70c2c9b0abae81ca19c802d5606b471e059f2831bf97f3958e5a47c3d","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.629938Z","times_seen":319,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":23,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBiEJpg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.428Z","timestamp":1789235942428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBiEJpg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27876\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Aug 2022 17:55:34 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27876,"size_decoded":28686,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27876, version 1.0","md5":"59cf7060d056de8c14af49e50e4e5634","sha1":"65a10ec16942035406bcd39b5cc4ad9b3de28bf8","sha256":"fa6124686d2a48518dadb4e8fd94292786d76ebfd77355d6b112efc20c5ab9aa","sha512":"08987f19a80fabc5299d554ecb7599103ffb91535074dff6697565b988a9b09d4eaa57017e23b1fe79b6cc1da3c9e6ddf044b5718b661f5953e60b0a6b4b441f","ssdeep":"768:+Y/HQVlFffo0WsYQ/aDET/sCCEUj7u7sORd/J4:+cwVlF3o04O/jlUHYRdy","tlshash":"14c2f1b620b2256df22054fbfcdb3e57dd80c17bd742bac80b290656f026d2264803f5","first_seen":"2025-10-24T02:19:09.672339Z","last_seen":"2026-09-12T17:59:36.630694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.441Z","timestamp":1789235942441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22132\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:46:42 GMT\r\nexpires: Fri, 10 Sep 2027 08:46:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Aug 2022 18:15:00 GMT\r\ncontent-type: font/woff2\r\nage: 205940\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22132,"size_decoded":22945,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22132, version 1.0","md5":"2438b57abe1c20df7e1106e3eb0eac28","sha1":"fdc9f9824215a8201e5fa825ddfc854da74ca018","sha256":"f1bdaf99aa3dd57a0ae937d03cc1e9097231716d15a5e1cfdfed3f8f524ec784","sha512":"7a7b5d0656eb7bc4401cfdb43141760a61c1264875ce2d8ae652192e8cbeecdfc361a7dc0c8a8f5370b0f68cc3bf29a3afbe2573ec1f801a75d19505a3d34c28","ssdeep":"384:uo8yLqYFK56OSgi3xVEJdTdzPugZFJYOC+s56HeJSJNlRsFzMmlsgjDP4X988:n8IqwK5FW3D+dTdzjnyO5s5n4JNsVMuE","tlshash":"f9a2e1e111a355fdbe90385ea2a3b8f4e9963b5b409043b3c7241146f1618fd14b1efd","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.631645Z","times_seen":68,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/images/image1%20(4).jpg","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.498Z","timestamp":1789235942498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /images/image1%20(4).jpg HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 12 Dec 2022 17:14:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 727194\r\ncontent-type: image/jpeg\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":727194,"size_decoded":727400,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 6168x4112, components 3","md5":"3441404dad3ceb9a95b13e87b1e869ce","sha1":"34b1a9a0d2a2619fee8dcc762b6ed41880c55363","sha256":"50ce96bcb06bad45cb669552616cbc6e73293d7d86c9321cf3501174c13c21ab","sha512":"fc298aba18bf93c64f72f65e85285baf73bf6c022afbbfaf03430d5a8142ccd6011f437e75689a304ddf67a137073cfbd9d1d15a4c7b29098a6e1667cded22c1","ssdeep":"12288:yCBpzhEXSBAW+1tVfwqefP0nlW7W4ILdCxKmuW9EICY8lcFkgD8kiX1FlBac/RZu:NBlWb/IqOP0noSZdC4mN9EICYmlgD8kx","tlshash":"02f4122e3ba71e97e18c733040460768ba66c865515b53bb81132e21b3c76adfd7a70f","first_seen":"2026-01-10T15:20:43.328032Z","last_seen":"2026-09-12T17:59:36.632375Z","times_seen":3,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/assets/js/bundles/spai-lib-bg.1.0.min.js?v=3.5.5","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.541Z","timestamp":1789235942541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shortpixel.ai","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 11:03:59 GMT","end":"Thu, 03 Dec 2026 11:03:58 GMT"},"fingerprint":{"sha1":"98:FA:95:A4:CC:C3:DD:76:26:D3:02:ED:25:79:43:23:E7:79:C1:27","sha256":"66:BF:59:C2:6A:40:B8:00:BC:42:20:03:6D:6B:DB:12:6B:88:8E:31:05:23:F9:60:23:68:90:2A:D7:6C:E8:D0"}}},"request":{"raw":"GET /assets/js/bundles/spai-lib-bg.1.0.min.js?v=3.5.5 HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: application/x-javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a02f127-a240\"\r\nlast-modified: Tue, 12 May 2026 09:21:43 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047, 830\r\nx-sp-owner: true\r\ncdn-cachedat: 09/12/2026 17:52:29\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f0adf367cbe79a4343a1cbe5b21606a8\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41536,"size_decoded":15887,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41535)","md5":"9e45fe99e3c86421f5e51fc82cde9002","sha1":"68f88830cbc7355588cdf2f6ecec010d942ccad9","sha256":"860be5d0ba91647bee9b7116554042c3b2a41d9f181d75495b80577ba62f9e6c","sha512":"9875adfd7bb45a1df9bbf106e1a9ede1b85584463e59f0769649b70ffd6d7a41d6bb0b6040df48cdada387c7a093bc60164791b62be416a6d776b2c8164b3b9c","ssdeep":"768:ApOj+cYxNsC1MHvhxvCDyvgwQyccXcITTtlEhFHR3KZ0lwqgO:AwihEhHv0IgwQonEzl","tlshash":"a913e7b97380347b97aa0257982f0104b12a6958564bd90cb73c74f7b998d8f31bfb36","first_seen":"2025-12-01T19:07:01.700002Z","last_seen":"2026-09-12T17:59:36.634242Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K5fQBiEJpg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.429Z","timestamp":1789235942429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v18/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K5fQBiEJpg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Aug 2022 17:55:34 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28216,"size_decoded":29026,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28216, version 1.0","md5":"91b62f24b29fc8286613b76d824069e6","sha1":"bc18eda8cf3e1256ddc01a0ac41b31729258956b","sha256":"a2da8056512e21dd63924e89ba5eb1d4dda25f90a2361014caac14779717cfa8","sha512":"3c481812eac959499f7e1ec8afcd474329d28d04e8561349ca80c7af804030e4fcfa1ae3f45ba1ec089e07cac6a5d78bcadae8f9b36d20bf61e90ff99f54b3a9","ssdeep":"768:EdvKhep/tFZXGbSzr75Eu6Z0i4rb2GL3y:GKYtFZl3tEFr4rR3y","tlshash":"56c2e1c7b0049f5cf80fc0b196e5751369ed8a99989f0524fbdfa8fb068a5b1f025853","first_seen":"2023-06-06T14:57:50Z","last_seen":"2026-09-12T17:59:36.635564Z","times_seen":10,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVc.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.440Z","timestamp":1789235942440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVc.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 06:32:50 GMT\r\nexpires: Sat, 11 Sep 2027 06:32:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 127572\r\nlast-modified: Mon, 15 Aug 2022 18:15:00 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44032,"size_decoded":29098,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409, Copyright 2020 The Open Sans Project Authors (https://github.com/googlefonts/opensans)Open SansR","md5":"b86c3a90749bd8f8c124c959c17570ac","sha1":"4df4629154f6e8c03bda4626f6a771f1bd72150c","sha256":"9f21f888c15e38433d68956a83c5f0f83aad6ed3768cf03c10402eb06ef206ab","sha512":"1551d59e3bcfc5e23a07dbf734f9b2572421d53488049f74e469d6733e3f0c461fe003314e9ce6ddf4f6784810b1e5c8aac0b53ec18c3b1dd91dcf89489492b6","ssdeep":"768:CchtOQv50E0y4YTVoneGmcriqbUO55fSB+RPy+O+yHW4/RB72R:C2OSKPyFqeGmc+bOZRP5gJhg","tlshash":"92138e23f392ef2de63131fd95d8e3d29e56d82077469387284e230eacd5098dda069d","first_seen":"2023-05-03T17:21:13Z","last_seen":"2026-09-12T17:59:36.636554Z","times_seen":22,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkyFjWV4ewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.446Z","timestamp":1789235942446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkyFjWV4ewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 15:53:33 GMT\r\nexpires: Fri, 10 Sep 2027 15:53:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Aug 2022 18:16:26 GMT\r\ncontent-type: font/woff2\r\nage: 180329\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22904,"size_decoded":23717,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22904, version 1.0","md5":"6d18f2b7a32a8e0b57b91e831af54ff4","sha1":"a4f33a20e29eaf8b3405e48a0ffcdf181ddd6cee","sha256":"7019c131b83058bd8744dfb566fbfc5243508234bc3939a18fcfdf6bf4f91458","sha512":"4bad32aafad1d073e6ec69fff720239e62d2e2cff601c42d89f9c2bc7d6660e54a5d1974791881c14b10d9d770972514655b4403e9442beeaee80a5819c7eec7","ssdeep":"384:gUVx2WXtVs+CDlhsfH8gOCZhtt8iEW2TgcRlV1MQd7cVtt:gUGWXtCWPFslnMw7Mtt","tlshash":"06a2e000bb7627875b7113a47f6a978342da3983c7ebed1cb046361dd9e12c7449ab8c","first_seen":"2024-10-18T08:24:15.017145Z","last_seen":"2026-09-12T17:59:36.63765Z","times_seen":31,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/spai/q_orig+ret_img+to_webp+v_564/https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.473Z","timestamp":1789235942473,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /spai/q_orig+ret_img+to_webp+v_564/https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321 HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=1\r\npragma: no-cache\r\nxtag-sp-debug-reason: URL banned redirect\r\nx-robots-tag: noindex\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6-late.css?ver=1669717321\u003e; rel=\"canonical\"\r\ncdn-tag: 2448370; Domain: outsourcestrategies.com; 307\r\nxtag-sp-ver: 2-ns62\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 307\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1080, 830\r\ncdn-cachedat: 09/12/2026 17:59:02\r\ncdn-status: 307\r\ncdn-requesttime: 0\r\ncdn-requestid: 8b687800ea692514eaa1b62fb48e378b\r\ncdn-cache: EXPIRED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/fonts/modules.ttf","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.480Z","timestamp":1789235942480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /fonts/modules.ttf HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 29 Nov 2022 16:56:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92400\r\ncontent-type: font/ttf\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":92400,"size_decoded":92603,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, modules    ","md5":"de27b3e66b2f8017e000aa9d8d24d60e","sha1":"e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7","sha256":"d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09","sha512":"f62a3c304dc43b6fc6b8dd8af84863f9651c8bdce5becd35503929482799fbe253c7aad3a94966713b2ca71c4ccfbb1e67f2ecc30634955284ebc81fd983c238","ssdeep":"1536:P2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWI/:P2S6qLRqKELiXMjCs7VDmGWAN8H79OIL","tlshash":"d793f97bc3cbcf7fe955eb75087b49252dfacb26926fc44e9a491c869404cf80d28294","first_seen":"2023-04-05T04:47:04Z","last_seen":"2026-09-12T17:59:36.638631Z","times_seen":10986,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/et-divi-customizer-global.min.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.484Z","timestamp":1789235942484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/et-divi-customizer-global.min.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Dec 2022 11:55:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1528\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5264,"size_decoded":1777,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d66857d7983b508497d6f65682fdb113","sha1":"30eba5e89284fa6dd078ee9d26138a5988dbfeb9","sha256":"1a68cd8c119d699e59e1211a2211343306f35b2690b759a36e7cb0f5deccdfec","sha512":"623aa3b6516577ee24846ca352ee3af43cab7c50a9fff70b7f3c51e2485e589c349ffdce1ca35ebaad31f7042d0df57672a72b7c111f45f58305cf81ca90548f","ssdeep":"96:XoDHk74QC7hCvJMPIIU2JPMd6kYwwVtIw8lrdYyDFKN42:XwWZdlSd8zFk42","tlshash":"71b1fd5d9b64752530375f3df36bff206f2580e6db094ea0b6e0c53987c144192a5eac","first_seen":"2026-01-10T15:20:43.356309Z","last_seen":"2026-09-12T17:59:36.639613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/wp-mediaelement.min.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.537Z","timestamp":1789235942537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/wp-mediaelement.min.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 05 Dec 2022 13:21:42 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1410\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5129,"size_decoded":1659,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1230489f8b09ca791b0f37872297314a","sha1":"1bab8b417662736fe9f0539a1a17de9e6beefe70","sha256":"d5beb779cf1772bea8ea6013b81199c22670040e17bada3e6935d78a96050b85","sha512":"52f5870476bcd1dc42694cee8b82e522bf9ed83df669bd4a980cd0806b88391395859ff00f0c73ecef6ac0a85de59f08f4dfe0b0b11809c7e44032383ba6225d","ssdeep":"48:MJURuyMp0TevMGla6P/7uMBzSH6WYznqLeWX1mzdpgujVBEv8CgAXuOm2bt:MJUR3wMn8JnqLnX1yVBS8CgY","tlshash":"ffb11198a504ad0cd2f577376b8dcb1c7eae81d2ae15c3bc7ab4e264f08ad445033d81","first_seen":"2026-01-10T15:20:43.33534Z","last_seen":"2026-09-12T17:59:36.641405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.431Z","timestamp":1789235942431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21516\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 19:09:25 GMT\r\nexpires: Sat, 11 Sep 2027 19:09:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82177\r\nlast-modified: Mon, 15 Aug 2022 18:12:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21516,"size_decoded":22328,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21516, version 1.0","md5":"90135ea44811b2d9610c33e07068fdb0","sha1":"84ef1a8343877a598f1c7cbae56f35ded54a1787","sha256":"bd067b886f4a67dd25c08fe73777bce7f506beb4c09d17d9f036f8a90901efd2","sha512":"911beb521d31fd5a45e27035ccff0604a9d16ca253e13762f202c38701805cfa7e3e1c9574d023dfef184e4e99f161f44c4d6b828aa8470438e2fa0ff7f44699","ssdeep":"384:3blTbc4hBQr5sDDldFTS1g/wMEWlpYunRPQAQOKCrpNryucElPA:3b554sDI1g4ME+Yu19fyulI","tlshash":"31a2d0a65fa7413df4f516eee445b46924b828f751cd843aa855ec3c2fc28a313b2d02","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.64274Z","times_seen":246,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4ewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.432Z","timestamp":1789235942432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4ewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 393\r\nlast-modified: Mon, 15 Aug 2022 18:28:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23704,"size_decoded":24514,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23704, version 1.0","md5":"3d4a6df8d47f0085c3bf7bd90563e9eb","sha1":"f0d96d332787d0a8604f2b99dde7f3b947942cf5","sha256":"d00bea31ec0d15e0e6013225b870d1f39fa2e26663d192c8520494c6156c0569","sha512":"fef3693e64074beb509eef43b0fc8b9dfb9a12390418e72807da4d86ffc493cf74aecadff4411dce71b6e35d5ba54ba9b2329da80565332503955484d2ca084c","ssdeep":"384:Ys4aWEfuVpd5kVxFp3pCaWwisbjYRDw0pemHmqHIxDpxkU2c7q5w6IT2wEFDB++i:HnWE2HIx9wzDw0TLHIfCU2Aq5wpaPFDC","tlshash":"8bb2e0f882ca4fc6c6a94b72b6fab96d878945ff044de4aa4c4dd9436552c0012a83fd","first_seen":"2023-04-29T13:47:49Z","last_seen":"2026-09-12T17:59:36.643978Z","times_seen":76,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk5hkWV4ewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.445Z","timestamp":1789235942445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk5hkWV4ewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 17:52:29 GMT\r\nexpires: Sun, 12 Sep 2027 17:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Aug 2022 18:13:31 GMT\r\ncontent-type: font/woff2\r\nage: 393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23712,"size_decoded":24522,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23712, version 1.0","md5":"bb4154746478a3dd008a8835506e35c0","sha1":"315a1b2407c69d3a337b3a148a7dd3b53015b70c","sha256":"9e055f2b91664dd7ecb10a5e20a5df82d2deca7fe00a9de0d146be0097a06ae6","sha512":"63d686971efb11aef4a4159f93f51730f0c12ffe38fcf65ed45f12cc2bf6b68378f5f2ed2c1a1c819ad755a29f7615ab5207578381f063d2ee278c05dbe39957","ssdeep":"384:mIy1fE0xjsMVHgutfvcmzlpb6MPZcv6aZgkRd8E7Uc50Wi66BHaC:EfECVH90iKoZcv6Gz8EByL66AC","tlshash":"18b2f179880ce5b8cf7089b53cbfcb581f79a048e9218da6b9d1687bc1473518a10fe3","first_seen":"2024-10-18T08:24:15.007911Z","last_seen":"2026-09-12T17:59:36.645278Z","times_seen":31,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/assets/js/bundles/spai-lib-bg.1.0.min.js?v=3.5.5","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.483Z","timestamp":1789235942483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shortpixel.ai","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 11:03:59 GMT","end":"Thu, 03 Dec 2026 11:03:58 GMT"},"fingerprint":{"sha1":"98:FA:95:A4:CC:C3:DD:76:26:D3:02:ED:25:79:43:23:E7:79:C1:27","sha256":"66:BF:59:C2:6A:40:B8:00:BC:42:20:03:6D:6B:DB:12:6B:88:8E:31:05:23:F9:60:23:68:90:2A:D7:6C:E8:D0"}}},"request":{"raw":"GET /assets/js/bundles/spai-lib-bg.1.0.min.js?v=3.5.5 HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: application/x-javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a02f127-a240\"\r\nlast-modified: Tue, 12 May 2026 09:21:43 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047, 830\r\nx-sp-owner: true\r\ncdn-cachedat: 09/12/2026 17:52:29\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c475c9d94170faaef3a0d47889321d5f\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41536,"size_decoded":15887,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41535)","md5":"9e45fe99e3c86421f5e51fc82cde9002","sha1":"68f88830cbc7355588cdf2f6ecec010d942ccad9","sha256":"860be5d0ba91647bee9b7116554042c3b2a41d9f181d75495b80577ba62f9e6c","sha512":"9875adfd7bb45a1df9bbf106e1a9ede1b85584463e59f0769649b70ffd6d7a41d6bb0b6040df48cdada387c7a093bc60164791b62be416a6d776b2c8164b3b9c","ssdeep":"768:ApOj+cYxNsC1MHvhxvCDyvgwQyccXcITTtlEhFHR3KZ0lwqgO:AwihEhHv0IgwQonEzl","tlshash":"a913e7b97380347b97aa0257982f0104b12a6958564bd90cb73c74f7b998d8f31bfb36","first_seen":"2025-12-01T19:07:01.700002Z","last_seen":"2026-09-12T17:59:36.634242Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":56,"connect":45,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/spai/q_lossy+w_304+to_webp+ret_img/https://www.outsourcestrategies.com/wp-content/uploads/2022/02/medical-billing-coding-company.webp","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.733Z","timestamp":1789235942733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shortpixel.ai","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 11:03:59 GMT","end":"Thu, 03 Dec 2026 11:03:58 GMT"},"fingerprint":{"sha1":"98:FA:95:A4:CC:C3:DD:76:26:D3:02:ED:25:79:43:23:E7:79:C1:27","sha256":"66:BF:59:C2:6A:40:B8:00:BC:42:20:03:6D:6B:DB:12:6B:88:8E:31:05:23:F9:60:23:68:90:2A:D7:6C:E8:D0"}}},"request":{"raw":"GET /spai/q_lossy+w_304+to_webp+ret_img/https://www.outsourcestrategies.com/wp-content/uploads/2022/02/medical-billing-coding-company.webp HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5158\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=30494651, s-maxage=86400\r\netag: 6d9a0da59119da6b59047a238772b267\r\nexpires: Tue, 31 Aug 2027 04:47:43 GMT\r\nlast-modified: Mon, 31 Aug 2026 05:47:43 GMT\r\npragma: cache\r\nlink: \u003chttps://www.outsourcestrategies.com/wp-content/uploads/2022/02/medical-billing-coding-company.webp\u003e; rel=\"canonical\"\r\ncdn-tag: 2448370; Domain: outsourcestrategies.com; 200\r\nxtag-sp-debug: SLT: 0.014\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078, 830\r\ncdn-cachedat: 09/12/2026 17:52:29\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f0b72ab67af32d65efe70bf525c6998c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5158,"size_decoded":6322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b882c23c7e38de8583b5d972cccfcb54","sha1":"3bfc1a85acda2fc3b9b445470a90bb42d4684736","sha256":"64221e324ffe90137f4a377c7f44b62ff8c320356b3e684c1b6f8d06a35ddf3d","sha512":"e571383febcbbe90c03a85e58ba5a3005cfc396969163922f64f20e6a726611f07f0241b80a4c5e1b4a828cde87c77b3c692284e53e46a79084e8cb6ce5aab92","ssdeep":"96:yvBFSdW5rDEabt4KGVPHnDWwpvtInkhD935Y9vQDZ7oEA+OyQDES6QRzXvJ+:SnuW5rDEa5GpRpFIcDNMvQDBBXQDEll","tlshash":"51b17c7aa2a32ac0e1bc3b9de84510abb79554c7b26d3cd222cd0d45907d380e382bc5","first_seen":"2026-09-12T17:53:09.154712Z","last_seen":"2026-09-12T17:59:36.646318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T17:59:01.409Z","timestamp":1789235941409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 12 Sep 2026 17:59:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Mobile","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":886180,"size_decoded":125470,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"24983d8c28057f93b3096213dd7daba2","sha1":"216bd9b985bc3bcc5c26fc86d97b0c4fd4a5ecbf","sha256":"8d487cfd7311da550b11873f383abfea00e2560175da250c4b12e89c3d912cc0","sha512":"27eb0ca87a50bbd10791c53a1ebaa8b1c9ba81ec2971a789fff53f37cb194a816f4d32bea68c4d369126dc42db7469a5fc358ccd3582aa5dcd115452c3dd4ac9","ssdeep":"6144:oMY8wtUJWWM7E/jP+roGPpq+ewqckFRByg3p:LGPpq+elckFRByg3p","tlshash":"d315f04faf7135b03543f3a0aeebd764d1a49183d505d8817bace2446f8625a89f22fc","first_seen":"2026-01-10T15:20:43.331639Z","last_seen":"2026-09-12T17:59:36.648253Z","times_seen":3,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":3,"connect":153,"send":0,"wait":319,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/front.min.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.452Z","timestamp":1789235942452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/front.min.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 02 Dec 2022 13:09:04 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1990\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8708,"size_decoded":2239,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e7450a0e82c26dab266c112610e354a","sha1":"b547916d40f7bb6d29974b201e25d8fe8df9d4a5","sha256":"68e5fed1ec9e87b644a7e96f152cbe9c04f034f00b1ad9e63a416e670516d021","sha512":"ed2eb56468f56b7d3b8460233e1fb9b5a55ce8e4e16ab2d2bf3f726a5083cf2c39d41b43743555fccd2507d73c0e163781af0b3df48553ca4c87922b2fd7d330","ssdeep":"96:l6DyN1WruO2OF9UdYOV7FtDFFggYZMK5IEHYEQIsHYs0APYEs/5yAPHmIH5EmIE5:lbN1Aag9k/UpY7bpK","tlshash":"f00224bc7b085d142d33668507be8b36af58f0e19b27479ebc9eec016347e923051b58","first_seen":"2026-01-10T15:20:43.308367Z","last_seen":"2026-09-12T17:59:36.649908Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shortpixel.ai/spai/q_orig+ret_img+to_webp+v_564/https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321","fqdn":"cdn.shortpixel.ai","domain":"shortpixel.ai","tld":"ai"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.475Z","timestamp":1789235942475,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /spai/q_orig+ret_img+to_webp+v_564/https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321 HTTP/1.1\r\nHost: cdn.shortpixel.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://greenleavez.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 257218\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=1\r\npragma: no-cache\r\nxtag-sp-debug-reason: URL banned redirect\r\nx-robots-tag: noindex\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://www.outsourcestrategies.com/wp-content/cache/min/1/wp-content/et-cache/6/et-divi-dynamic-tb-30232-tb-29492-6.css?ver=1669717321\u003e; rel=\"canonical\"\r\ncdn-tag: 2448370; Domain: outsourcestrategies.com; 307\r\nxtag-sp-ver: 2-ns61\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 307\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077, 830\r\ncdn-cachedat: 09/12/2026 17:59:02\r\ncdn-status: 307\r\ncdn-requesttime: 0\r\ncdn-requestid: 9145c1404d72f2938da9e2e204d267e1\r\ncdn-cache: EXPIRED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T04:24:29.959044Z","times_seen":18436735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/fonts/fa-solid-900.woff2","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.481Z","timestamp":1789235942481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://greenleavez.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 29 Nov 2022 16:56:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80300\r\ncontent-type: font/woff2\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":80300,"size_decoded":80505,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-13T02:35:31.939472Z","times_seen":31659,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"greenleavez.com/css/mediaelementplayer-legacy.min.css","fqdn":"greenleavez.com","domain":"greenleavez.com","tld":"com"},"ip":{"addr":"162.241.123.75","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://greenleavez.com/","date":"2026-09-12T17:59:02.535Z","timestamp":1789235942535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.greenleavez.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:48:26 GMT","end":"Sun, 06 Dec 2026 05:48:25 GMT"},"fingerprint":{"sha1":"DE:AC:C4:63:DD:E2:80:D1:C3:90:9F:01:CC:42:49:A2:06:90:D7:33","sha256":"E8:43:D5:A8:B8:4E:D7:F3:C5:6C:4E:92:73:18:92:AC:B7:DF:02:A9:EB:EF:2E:A2:CA:81:CC:3B:A6:75:D1:5D"}}},"request":{"raw":"GET /css/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: greenleavez.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://greenleavez.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 05 Dec 2022 13:21:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3651\r\ncontent-type: text/css\r\ndate: Sat, 12 Sep 2026 17:59:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14276,"size_decoded":3900,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1570b4db659180ccd0153fd776f0167f","sha1":"570e19f33caad21e62db373931481851652c67b7","sha256":"ab28ed0ebe741daf527d9cd6fa16eeb8f4492e0c68366bb1c355ed5c4318480d","sha512":"6df43475cf9f83dad98eaaeb6337c1f164cd0b234c8ce37cbada4dd62ee5336484ab5cf55a4d0397d710a421b0c48dc5bd689ae7a89136e221199a0059b67b85","ssdeep":"192:vsXiVxqGtH07saRLVoltT+86KuVuYuVuU5mYaI8UGPJShWhA:dDttH07TVZ8pmY38UahA","tlshash":"87522354da4801086237ea686bd20779b73f8353be0296bdfbf93886d343949c175e93","first_seen":"2026-01-10T15:20:43.344914Z","last_seen":"2026-09-12T17:59:36.651582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"greenleavez.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}