{"report_id":"68de5c84-5b2c-4a81-88f9-7dbb7d64b7a3","version":6,"status":"done","tags":[],"date":"2026-03-27T13:39:04Z","url":{"schema":"http","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"title":"ぷらら Webメール","dom":{"size":102527,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"7fd40c4bd73c64b869da7a75996b6c87","sha1":"acdb9a9b11a454641a18a03711a1f109de1bfee6","sha256":"402e75e54964fb95aaafe2e85ede9aa84db585f92c0abb284b08d54736f0588e","sha512":"c48e90bf52d9e352343245c0e0ef078bbe72d0cdf555ebc3b4a32777f7e107052e394d08816c8857c1f2f0394a0ed747013243055d6f453d2417a7d458f42884","ssdeep":"384:3Ty+Qdf09RpRNtzGLS+x/HJiNeVg4I9KLNiXGdxG9KOt0rRRS7ZYL1AF0bjxTMtT:gavRNtz546GdGYNZXj0E0rENuv","tlshash":"59a3cdc98994a133c4bd2c401a6f814ff15d5e77434a42e9c214dfba4cf16c8e6abdae","dom_hash":"domhashe98967f55dc4c8790ce3bbe6efd98a2f","first_seen":"2026-03-27T13:39:10.011237Z","last_seen":"2026-03-27T13:39:10.011237Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T13:39:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sec.plala.or.jp","ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"domain_registered":"1996-07-24","domain_rank":0,"first_seen":"2020-03-20T01:37:55Z","last_seen":"2026-03-25T01:26:45.198483Z","alert_count":0,"request_count":19,"received_data":927976,"sent_data":25963,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nisha-interiors.com","ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2023-09-09","domain_rank":0,"first_seen":"2026-03-11T22:31:56.207951Z","last_seen":"2026-03-27T12:28:47.563064Z","alert_count":56,"request_count":14,"received_data":141736,"sent_data":7748,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"127.0.0.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":0,"sent_data":8913,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7025bb416bc68ab171e256942d3e99b","sha1":"38530037bed942c2b92bc77fdf35b953e1f9ec3e","sha256":"b035150bf331b14e9fbae35a85f5019c82d49c552ff8d44504259b31923051bd","sha512":"f48bbd740e40d37c3eb5d9ff47272c74848d150447e256cccf5b2ece8560482b8066be6d30b3b5797d9e6a310118ce8612f8f9b8e59aac77404d53734487b577","ssdeep":"1536:LNfbaq0WGF54WhpTxZFm2t+PoGegl+2pfOJzXBU8SIEVcBQBzTy0ucA/s0071vZJ:xaq0WG5BiE4OVEV1pucA/s2Mzdu/T6","tlshash":"f4a431d94ac4d023907e2c901a6f088ff22d597783855396c164bfac88f12ddf7a79ad","size":468220,"data":"","first_seen":"2026-03-27T13:39:10.016705Z","last_seen":"2026-03-27T13:39:10.016705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"24aaead30ee9e914cbce7c5e9d44b3f1","sha1":"df0f04b2180d167a81be0ffc5380a35721ee43c7","sha256":"9ca07172ecbc2b8acbb21a219f5024e8f8c73f20b72b6fce9887a3a6da363e74","sha512":"27188e9e19d1d86e5f05fdabfb67a092948ee489dadb8e2875764edb47c815b2fce2e7c027cccfd5644bccc7fa112d614923406df83c6a5f95a363e380f5b741","ssdeep":"384:WTy+Qdf09RpRNtzGLS+x/HJiNeVg4I9KLNiXGdxG9KOt0rRRS7ZYL1AF0bjxTMtk:JavRNtz546GdGYNZXj0E0rENuA","tlshash":"00a3cdc98994a133c4bd2c401a6f814ff15d5e77434a42e9c214dfba4cf16c8e6abdae","size":102418,"data":"","first_seen":"2026-03-27T13:39:10.031816Z","last_seen":"2026-03-27T13:39:10.031816Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e77b11d0310579724da175eb58dcf0d8","sha1":"aaa5cd80e905385dc467083759820d1bccb236ce","sha256":"ec5445c5b9ddb2ef7218872e56616bb55b0f086e0fcd71782c81adcfb718d3a0","sha512":"db5c673ce3348b7d187d8de9fd187907ae8462ecca30d0ffbcf5bdecc883b010c42e64d4a7c9b15f62ed75a39fb1700f2e08b25ac5df6ea7988a4f2d8d336aae","ssdeep":"768:rm63ABGHQm452fjwukdEHstLdGOwhKHwgUmyFtjHuRVkCWYYMMpg4iKwQLSUtZ5A:rBABMQmSIZowgUmOjAWYYLprpM","tlshash":"b22421dd27a8d02b856f7c90862e14bfa06d71b7c74e1263c1517e9884a970183b7fbe","size":224380,"data":"","first_seen":"2026-03-27T13:39:10.019476Z","last_seen":"2026-03-27T13:39:10.019476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/js/tags.js","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"229f1cb11d0d21b6c1e0660dfb0b13e4","sha1":"8f2f3727896b72e1822f040c124ca0afbb79d8f5","sha256":"274ece4bec63f087d346cc5702cbdfeec550c5393c73eb8955a101cfb8e87a35","sha512":"4ee662b820472fc6cdde66cb3766f5156be2903e8eb4be2b1d4c7a32e5a717a6796fd1eb753f8aa51a8679ac0562291eba6bec2f4a44c3acc3d2deaf4a990cb0","ssdeep":"768:UFTgUbgUVgUcgUZgUYgUogUbgUXgU4gUnyGcWOPZi7Aj5:YiPUsj5","tlshash":"eba37ddc39a5a912b54f2ce15e2d484b322cd8be4b83c73180117ae4f5f4b42d7a797a","size":99612,"data":"","first_seen":"2025-11-04T14:36:20.934214Z","last_seen":"2026-04-10T03:04:23.218556Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=4A5A5AF0DC7FCD5B18ECA535D4ED72A4?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBA4AV1wMBQMBD1NcBlEFWQwJCFtaXgwGAVNaDgRVCV1dWwdUAFlRVgEQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQARSBgNQXAwFAw5dDwNSWgFWUFICWg9XAwAAWl0GUAgLAQwCBVBdV1cWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBW5RXgZXT0cSU1ReTVFOb1tYVFwAWVtfElVCXgAG\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d7e2776d847f37325da22658062337d","sha1":"90afe0ace063fa208e7d6271cb46012439b0ecd7","sha256":"6b37d6734e89a13174afc991f8ff99c44666b4d3332a88c151c448b322c9495b","sha512":"cc6d90a2c85c884d90b82b05ec5c2e9b6eabf27e4a45afb5f8e708041db1785fd3608bf7275b5284763faaa1a5a695e1115516bf0903e45cd6e7568fc3806851","ssdeep":"","tlshash":"1b800002c2c00e2bcb80a2e2a30802222f03cac8a82b3808822222382c0c80a8088cc2","size":35,"data":"","first_seen":"2023-03-13T21:23:42Z","last_seen":"2026-07-14T06:07:00.127799Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eff409565ed1d22c17d73ce417bd15","sha1":"ae526f9ce16489f0ca53977b7722f56806555342","sha256":"d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3","sha512":"505ce0ccebf07887dab601f952ee07414468a5d4e822ecd45303ff24ae8793ede9c917e0c863a3756e5c214eb82df576b178397c5113a00ff8a42692f7b2c0a2","ssdeep":"","tlshash":"fb8000c20ca2c0b0b0a20c2e00283a008c0e0b38a22033a320a0a002a008003c0302ca","size":32,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-08-10T12:45:32.871806Z","times_seen":18048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/js/common.js","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6116db6842e56a64e38bec929bc2d10","sha1":"d197b6f1446fe941e9fb5a8cb6db69f062b00cb2","sha256":"71ae5f3993d4dd12caa744a89dfcfd695fb05f828b73b5d36598334b897673e9","sha512":"774fbe993290312882623081928ac75754adce0199a503d3c34ce4e376b981657736efe1796f4903354210d07d5ead7c742912ad9cd0b12de0c029f18e85e8e3","ssdeep":"","tlshash":"2941ddcc0ea38d794962c805ea7758c1fef15d61aa25f010f55c31a5248cb66116ccae","size":2170,"data":"","first_seen":"2025-11-04T14:36:20.909887Z","last_seen":"2026-04-10T03:04:23.231919Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b8c682321966843b999411400c176af","sha1":"a0aa94ec855de386a3680e0b9c3337b7cd019fd4","sha256":"a58105c94c2a6c1ea3cc4e32bae34a8ca4a33f3c0f7764455f536fa258c7cc32","sha512":"c043be3fb2b9232d8cab5fe8d71325a7204f3ee79c9d8a826dfb26f8b417fe64df8df7e406f465b6a4aced82d276058e1acf04ee4d4f89c7a567b86315132c97","ssdeep":"","tlshash":"8f600000c0cf3c30030030003c000c00000c0c000f3000003c0300000003c0fc0f0333","size":15,"data":"","first_seen":"2023-05-22T12:54:30Z","last_seen":"2026-05-24T15:43:34.75619Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9421bb01aaee24cbc1295741fe7d99d6","sha1":"ade78ebda77146306664c3f676f0acf76192cfc0","sha256":"951e230f0dd6dfd473dd4640d17e349785240421885049930dedc434383f2401","sha512":"4f8bd057bf59dcbd65798ce044ce3ada067c2ccfb8369db53f2435b1abb0498d4e4a603b45c3a51d4b0b983500263dd64ae45b7a006cdcf2547b0bb9b7537201","ssdeep":"384:WTO6iz5hqkf0O0Cub1bHVUDtyowxFt7thAXYt0r2BZj0HF7ZYL1AF0ff09RpRNtd:JI0rUj09vRNtz546GdGzf5NupO","tlshash":"07a3c1c98994a533c4bd2c401a6f414ff11d5e77434a42e9c214efba4cf16cce6aadae","size":104531,"data":"","first_seen":"2026-03-27T13:39:10.033835Z","last_seen":"2026-03-27T13:39:10.033835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd1fe95d7b0809a8abced5ad99f4e85f","sha1":"8db9e7be818fa67e1a5d0fa6d965a31a5472e076","sha256":"7dfd8fc6027e27ec68181cc591674f0f44c6a6f9b2af82ec4d4949410db0c1c9","sha512":"5f56507ba8bdda461f501e2a666a4252fc27c06e8275737b825c73abcc2ff190823d7d15c22600f32a249c1eb96c832549132b2d9da8f38ad39de70c67e9f14a","ssdeep":"","tlshash":"04c02b524649f5c70cc201ffb0488c1300f02330d145c330b44231893a780a01f3003a","size":134,"data":"","first_seen":"2026-03-27T13:39:10.021872Z","last_seen":"2026-03-27T13:39:10.021872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f190b79e1866bf890bf898cb3959c66d","sha1":"7cd333f517e99a13ae0f7d5e0d9e2cf6b61415b3","sha256":"d7b66c3c6e8edfd03fc2cb2be836eeaec0dca775124629f9644796148afe256f","sha512":"f1fb165a9fb739127c5b71c7332e61840b29949c88b859d10c3a3f25667a3b9a26749575889c2c9125a5b783f222d286a51147f35818d3fca988e2edb89300d2","ssdeep":"","tlshash":"92c02b045443ace811d8183f3c4c2a7c80b00f529afc82a2f0912098d89810403c1dec","size":134,"data":"","first_seen":"2026-03-27T13:39:10.026257Z","last_seen":"2026-03-27T13:39:10.026257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5eb6348ce940dfcbd792fb03a17c0c6","sha1":"c0fb7ee1f0fa28a096383444bce4af94c3142b32","sha256":"3cfceca8f68d71c5d2cca9bdbf342954d8980e09024c3e4f48b45a4df145c573","sha512":"98ab958c18f1336f0aac3ecfee7e40341404f7615feb91c25a33f698bba91c4cbadb08df488e853c3c5fcf82172c51bdad5966c7d36afe34f0e33c6b2e90cc2b","ssdeep":"","tlshash":"fcf0462adf84080f47d6032a972b01cabf764bb53c99188c185c7fa4141082c61cbbe9","size":572,"data":"","first_seen":"2025-04-01T11:23:23.910468Z","last_seen":"2026-04-10T03:04:23.239256Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"00b65d000283f5f80295c17d8e45bfbb","sha1":"4c646fe85dd8637dc32b5f4249fbb64705095c88","sha256":"5c9eb150ba387998b9662582ccfb993f31c4635e3b662fd11299f96c865afc49","sha512":"9f4df4ce2e7e5905216bd039465369f3595c1ff4ce480ae6f69862772d38e07d575b21654b8e52fb0624caad97756b604560c187c6f2a0ed7a31f0d75ca20cd6","ssdeep":"","tlshash":"dd9002666191692a42c91316956151c13a321426a452244298551444011295dc591686","size":47,"data":"","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.234842Z","times_seen":648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=3d3f2e246060743531246a63613d312672677635362e30382e31302c30322c37312639342e373b2633342c373b2e31372c37382636382e353b2e3032","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:54.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=3d3f2e246060743531246a63613d312672677635362e30382e31302c30322c37312639342e373b2633342c373b2e31372c37382636382e353b2e3032 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Fri, 27 Mar 2026 13:38:54 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":50,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/css/base.css","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/css/base.css HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 19 Sep 2025 12:08:12 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2918\r\ncontent-type: text/css\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13351,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5221f8060b2210f7a73bc189eb6da8d1","sha1":"9e20dc7cc7e81bb75d1c0d2c57cc925749ec9203","sha256":"ad1b832dc8a4bdb7535143d71c8c8737129b5f9c40295727544ca157b45103e3","sha512":"1fd3ee347ebd243e73812e3db11db80b3b58ef50767c8c8378d46380c24a6ce6a2580fd39505a8de938397cde40bdc0daa72b6eea1590ca11718f0d5b4da5570","ssdeep":"192:DBbcQ2GGDWypz9TV3LHQFvAlsJqTD3W+tDfu:DMVwqTD3WN","tlshash":"0f52f26daed9590f224ed4c0ebf8b164fa186089dd691eb4b59d2738f30d1b4203dbc9","first_seen":"2025-11-04T14:36:20.922883Z","last_seen":"2026-04-10T03:04:23.202887Z","times_seen":38,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/loginhead.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/loginhead.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 17:48:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3169\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 58","md5":"590e4aee24ab9e6f026d374ff67e5daa","sha1":"dfbfc73476f860f4bc1a977b9612456978fd5bae","sha256":"0be823c43133470e457a8066e02ef661adbe9b3d08e43a11ebeda87562fe361b","sha512":"4e2c492ccb3dd3834fe8c34be9fcd0a67dcdfda5c697358f51bdd390cbbcb566551e69e0c29c86ab2e83595c37e90877591241858a9726266cb9cad9cf5ba236","ssdeep":"","tlshash":"76516dfc58f0c825ac94e7770c16d8627f5a9018574964233168b6bfc54fe2836658fd","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.232422Z","times_seen":637,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/loginmiddle.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/loginmiddle.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 18:33:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":130,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 5","md5":"055cf0e751968aa1eaf4ab26b6267caa","sha1":"1fd229e193c7bac7dece4979e4211bef5022bb0e","sha256":"4e6fff51beaec33a7639e509aa82466c31cabfdf23ea24850edb76d873596b8c","sha512":"970626c34cd8ea720e109e7eb22c0898e7d971afcb8a69ff78f093db395aed14ca2fb1dfd3535cd4d2499137889f2550477b2f14123016e45990b3dc1abe1f74","ssdeep":"","tlshash":"34c09b6dc860642b504d75734417e1cd760947e85c0618dad5756595a5086b1f6301d9","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.233641Z","times_seen":636,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=1","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=1 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:42 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T12:45:32.643637Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":1094,"timings":{"blocked":538,"dns":291,"connect":20,"send":0,"wait":17,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5901/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:46.145Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5901\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JpufuRAsSmNR+NywYdRKnw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":1076,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":1076},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:6039/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.342Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:6039\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yJ7QoH307UbWjpxZBj2WgQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/barg.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/barg.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 17:04:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1738\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 30","md5":"13a156ce3615ab6a1206daa3b16a69d9","sha1":"2efb6bc8681bf1d35dd317a9b47bff4c9b747885","sha256":"ba71589b6bb729587c3c110462cf7843859a61d03b0f9bb6c9724cf40cdd9f76","sha512":"e3a988ea2d7f0d9ee79b46d2d75959afe4b6cf1183e953cbf07464cd26bcb907bd8a9dd0bea77874453c3b5bd86283badee45fb5ab7780261b52ec0409da054e","ssdeep":"","tlshash":"d031f86297695edbdd1a02bc200921e70c04d52981a8b0a8a8e2bfdbca4da5013dc483","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.496032Z","times_seen":804,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ja=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\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ja=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\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=98\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=39383e24247567613f3b312c3b302e34322c313d3626726d3f7967712e63756660356c643736603d36323832373563643567623e32396163676461633d3437303e6d6b373332346b343a3534303863653966303135393436313136323a3131666c3a2e776b7176643f6e69656a74","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:44.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=39383e24247567613f3b312c3b302e34322c313d3626726d3f7967712e63756660356c643736603d36323832373563643567623e32396163676461633d3437303e6d6b373332346b343a3534303863653966303135393436313136323a3131666c3a2e776b7176643f6e69656a74 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:44 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:63333/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:44.796Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:63333\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2ndnJaI7PdbBK7+f0eLPKQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5902/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:47.259Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5902\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +qfcql8+R9bHKKvPhrLfXg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":1007,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":1007},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:7070/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.399Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:7070\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5TWZbmDAwlRmtUSRgKVMRw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/favicon.ico","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 09 Aug 2022 20:37:53 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 355\r\ncontent-type: text/html\r\ndate: Fri, 27 Mar 2026 13:38:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"59f6ae7c7f154ec74d418d4ed6fc5b0e","sha1":"674860108a41ab23ba5f73635749332bd8a46b7e","sha256":"50e0767f2731da7ddb56d719dc85a7f830c4a860d8f09d0f25401d3dc7097d7d","sha512":"501f35d5347bd1f20024a1c76172874e0026289f6dd60de6a1f83ef2deb0fff07cd75c45b4dcf693a7c2ff903528bedbd05c2b9f9bb439d294f5f904427173f7","ssdeep":"","tlshash":"fbf0eb671c62c4436521c68a33e1ee2c58983213d109ed6ab6de522ccb89bdc88d3a39","first_seen":"2023-03-10T19:53:58Z","last_seen":"2026-08-10T06:50:14.857002Z","times_seen":11862,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3c302e2468716d7d3f55696c666f7773266873673f576b6e666f75712d303033382e6271603f44617067666d7a253230313134 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:42 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 406c95408980b884\r\nX-Robots-Tag: noindex, nofollow\r\nSet-Cookie: thx_guid=e172f7d040838c7ade1992de29f5b448; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;\r\nP3P: CP=IVAa PSAa\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468220,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4354)","md5":"c7025bb416bc68ab171e256942d3e99b","sha1":"38530037bed942c2b92bc77fdf35b953e1f9ec3e","sha256":"b035150bf331b14e9fbae35a85f5019c82d49c552ff8d44504259b31923051bd","sha512":"f48bbd740e40d37c3eb5d9ff47272c74848d150447e256cccf5b2ece8560482b8066be6d30b3b5797d9e6a310118ce8612f8f9b8e59aac77404d53734487b577","ssdeep":"1536:LNfbaq0WGF54WhpTxZFm2t+PoGegl+2pfOJzXBU8SIEVcBQBzTy0ucA/s0071vZJ:xaq0WG5BiE4OVEV1pucA/s2Mzdu/T6","tlshash":"f4a431d94ac4d023907e2c901a6f088ff22d597783855396c164bfac88f12ddf7a79ad","first_seen":"2026-03-27T13:39:10.016705Z","last_seen":"2026-03-27T13:39:10.016705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1144,"timings":{"blocked":539,"dns":292,"connect":17,"send":0,"wait":28,"receive":37,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*, 2kamd3p6/406c95408980b8848993ff28bc16c0a0ab096a7e2acb9bab\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nisha-interiors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nLast-Modified: Fri, 27 Mar 2026 13:38:43 GMT\r\nExpires: Wed, 26 Mar 2031 13:38:43 GMT\r\nEtag: a2ad95c8468d4eb58071265aaaca8b6b\r\nCache-Control: private, must-revalidate, max-age=0\r\nAccess-Control-Allow-Origin: https://nisha-interiors.com\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T12:45:32.643637Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":43,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5279/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.388Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5279\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6xH8J+AgfEqCwzZWRsFqMA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/index.php","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T13:38:40.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/index.php HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2542\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8863,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"61f3988a22998a5340c15c9ee9b722cb","sha1":"f728473795527246d9bb1d9ad3e45d48b9a0e9a3","sha256":"5a9c1e2d60814839c2491a56bb27d23c072a5d106bf400f38958c78e3f060560","sha512":"36039dd5a6be6b7528fad72e953fef22640dfd520ffda357e920cbb8052d5af98acbb48f7a4b26bb6e644ca3b030cc38f7993a227d58084cf9fd244bc04b38fe","ssdeep":"96:9DPX1h9tD9t8np46hCDNEaLFNb3Kb3OGmi+H951wFrqNbYLXo9T3O78H1HYoRbDw:9nP6p4Pm3VyOUjgcGj","tlshash":"52021e087ae43b4b59015670d3642e879fe2542fd7224c48b45d92be1f48b8e8c7babc","first_seen":"2025-11-04T14:36:20.92044Z","last_seen":"2026-04-10T03:04:23.23315Z","times_seen":53,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":284,"dns":0,"connect":136,"send":0,"wait":315,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/spacer.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/spacer.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 16:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-10T13:59:52.469092Z","times_seen":111209,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3b3e2e6e71633f3e30646533336439386166373c64333362663164376a6135326e3830663a3264","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3b3e2e6e71633f3e30646533336439386166373c64333362663164376a6135326e3830663a3264 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/top_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=97\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102514,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"3f8eb01ff8a6fc043dcac0889e5d5d78","sha1":"d0b6d175dfb272ca822b19c08c457de9d6e1c801","sha256":"a2c0c5afbd4bf59d0fe1c0c673d87f581ac256013504eab9ba2d4cd7872e2cea","sha512":"65f7bbedfda40cafe852cb75c85f50328b5fa6a4a57ff7a43f156441ffc1ad70095d1dda8dfdbb09e6097d73ab242d9537f47edc08aff7fdd239144b1a1171c1","ssdeep":"384:WTy+Qdf09RpRNtzGLS+x/HJiNeVg4I9KLNiXGdxG9KOt0rRRS7ZYL1AF0bjxTMtT:JavRNtz546GdGYNZXj0E0rENuv","tlshash":"cca3cdc98994a133c4bd2c401a6f814ff15d5e77434a42e9c214dfba4cf16c8e6abdae","first_seen":"2026-03-27T13:39:10.018602Z","last_seen":"2026-03-27T13:39:10.018602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-03-27T13:38:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 406c95408980b884\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":224380,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5785)","md5":"e77b11d0310579724da175eb58dcf0d8","sha1":"aaa5cd80e905385dc467083759820d1bccb236ce","sha256":"ec5445c5b9ddb2ef7218872e56616bb55b0f086e0fcd71782c81adcfb718d3a0","sha512":"db5c673ce3348b7d187d8de9fd187907ae8462ecca30d0ffbcf5bdecc883b010c42e64d4a7c9b15f62ed75a39fb1700f2e08b25ac5df6ea7988a4f2d8d336aae","ssdeep":"768:rm63ABGHQm452fjwukdEHstLdGOwhKHwgUmyFtjHuRVkCWYYMMpg4iKwQLSUtZ5A:rBABMQmSIZowgUmOjAWYYLprpM","tlshash":"b22421dd27a8d02b856f7c90862e14bfa06d71b7c74e1263c1517e9884a970183b7fbe","first_seen":"2026-03-27T13:39:10.019476Z","last_seen":"2026-03-27T13:39:10.019476Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=3b3e2e6e71603f6c34663731346261643061613c32383662313966356a306635696d3e63636035","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","date":"2026-03-27T13:38:43.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=3b3e2e6e71603f6c34663731346261643061613c32383662313966356a306635696d3e63636035 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/login_on.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/login_on.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 18:36:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 392\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"b1c7215db449a527baa88c02d73774ce","sha1":"9592d6b8cb74f2a9bea17e188a066acc7f86b8e8","sha256":"abac16ca16c7dd5ed2d0c3c53b6ea53474224de2ebe6d546e860b73df5334f54","sha512":"bc82c10737af4534a24b8ee62a0ed4bdc8b2b330df0a31a0f634f8e6984c439c74bdcdc8d68994a80f89e585dc4f21c0e9e9c94074abb59c4f10b9049903e926","ssdeep":"","tlshash":"34e061d555fa4811f1fb02b1ab9fe52a120db22c9803e11b1d19d27b1c6101964795a6","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-10T03:04:23.225465Z","times_seen":624,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":104627,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16596)","md5":"df5ee85aed281ac730ae8da7df93506a","sha1":"674c99d5443f291189e7e35c3b5bd27a38783d71","sha256":"ffa86370038cca8169ce495fbd798d726883073488ab5ac32d34982457a35fa8","sha512":"c8cf4b893ae4b8aca229fe5d0196d014f301bbfa6f12d721488a1b57b31b4f531d7b88d2ea863ac5f3a5b231b1fae9c4242c20b76b23e6356ec1b3b8979b841b","ssdeep":"384:WTO6iz5hqkf0O0Cub1bHVUDtyowxFt7thAXYt0r2BZj0HF7ZYL1AF0ff09RpRNtk:JI0rUj09vRNtz546GdGzf5Nupl","tlshash":"b9a3c1c98994a533c4bd2c401a6f414ff11d5e77434a42e9c214efba4cf16cce66adae","first_seen":"2026-03-27T13:39:10.020857Z","last_seen":"2026-03-27T13:39:10.020857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","date":"2026-03-27T13:38:43.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=97\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":134,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cd1fe95d7b0809a8abced5ad99f4e85f","sha1":"8db9e7be818fa67e1a5d0fa6d965a31a5472e076","sha256":"7dfd8fc6027e27ec68181cc591674f0f44c6a6f9b2af82ec4d4949410db0c1c9","sha512":"5f56507ba8bdda461f501e2a666a4252fc27c06e8275737b825c73abcc2ff190823d7d15c22600f32a249c1eb96c832549132b2d9da8f38ad39de70c67e9f14a","ssdeep":"","tlshash":"04c02b524649f5c70cc201ffb0488c1300f02330d145c330b44231893a780a01f3003a","first_seen":"2026-03-27T13:39:10.021872Z","last_seen":"2026-03-27T13:39:10.021872Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5950/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.301Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5950\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: g2kVhhDF0DGBhqfDanjVrQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5944/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.353Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5944\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: XojZhmLbwoExH1g6PbPJNg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/login.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/login.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 16:20:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 424\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"47e5e2303fca8b31ed4fc0e4592eb05e","sha1":"926791b0c9bea9eead7e6b7e596f078907bf2ef1","sha256":"ec2716d4c90cf8b58b22978f562c937382d76f259fbd5a82b2738ab6ccba0b51","sha512":"023ec0b4cc3572cd71b7b9232a1214311e29d9e25a5cc2c86e7aea248222d87caee50319dd9b657e94a358aca87672bc3f8aa1c4c046affba6b42514d38a06bb","ssdeep":"","tlshash":"f8e02393d366674aac2fe374071814218c07b615b70d505f6844e8122e1977839d5f60","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.497676Z","times_seen":760,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=2","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=2 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:42 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-10T12:45:32.643637Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":1103,"timings":{"blocked":542,"dns":295,"connect":20,"send":0,"wait":18,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=3b3e3f2424677a3b3f3b3530646235633967353e373133303b3537373d3135303f696c363637353b3a3a30346038326365246570343d303430643a3a6d67363a6b383c6067676669673a616764396236343a3338343124657a36713f3937333b3b393a34373b33303a24676e5d683d306434346d33656165316335326d3238603d3f3a35353a333861326637646166386136363d3561672675676e74354f6571692e7f656e703f646e746d726b706526676e68576a3d3a32363666616e61396638306b3a6336313d61366360303633323233393833316133323035646b672667703c35336161606a3463663063623530643a613137323262303667606c30613038383824677a3735363a3066666333393564303e643937393b3237333f63393038306a673234603f246778353f3935303934336d33623b336063343a696739326d3a6a36603a603f673436343026657837713d3937313638323832343c30393626302e6161663f3c3436313436266262763f33","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:44.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=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 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Fri, 27 Mar 2026 13:38:44 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=96\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=3e3b2e2468646c3535246a646a3d62623035613c66386338613660306c3b65606a6e6a353537616e676436673239266a66766e35323a3336363738352e606274353b","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:45.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=3e3b2e2468646c3535246a646a3d62623035613c66386338613660306c3b65606a6e6a353537616e676436673239266a66766e35323a3336363738352e606274353b HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Fri, 27 Mar 2026 13:38:45 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=93\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5931/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.313Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5931\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Udmm/5NsodPNrCgYtpsTLg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5939/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.330Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5939\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: GKJtLOi1SHHWcdNteOuNoA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:6040/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.366Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:6040\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jBr/OZI/GSNUdhK6o1P93w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5938/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.377Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5938\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MxJ/3Ukue+zxd7qYLNkClg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f190b79e1866bf890bf898cb3959c66d","sha1":"7cd333f517e99a13ae0f7d5e0d9e2cf6b61415b3","sha256":"d7b66c3c6e8edfd03fc2cb2be836eeaec0dca775124629f9644796148afe256f","sha512":"f1fb165a9fb739127c5b71c7332e61840b29949c88b859d10c3a3f25667a3b9a26749575889c2c9125a5b783f222d286a51147f35818d3fca988e2edb89300d2","ssdeep":"","tlshash":"92c02b045443ace811d8183f3c4c2a7c80b00f529afc82a2f0912098d89810403c1dec","first_seen":"2026-03-27T13:39:10.026257Z","last_seen":"2026-03-27T13:39:10.026257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/js/tags.js","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/js/tags.js HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 19 Sep 2025 12:09:44 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15283\r\ncontent-type: application/javascript\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":99612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16159), with CRLF line terminators","md5":"229f1cb11d0d21b6c1e0660dfb0b13e4","sha1":"8f2f3727896b72e1822f040c124ca0afbb79d8f5","sha256":"274ece4bec63f087d346cc5702cbdfeec550c5393c73eb8955a101cfb8e87a35","sha512":"4ee662b820472fc6cdde66cb3766f5156be2903e8eb4be2b1d4c7a32e5a717a6796fd1eb753f8aa51a8679ac0562291eba6bec2f4a44c3acc3d2deaf4a990cb0","ssdeep":"768:UFTgUbgUVgUcgUZgUYgUogUbgUXgU4gUnyGcWOPZi7Aj5:YiPUsj5","tlshash":"eba37ddc39a5a912b54f2ce15e2d484b322cd8be4b83c73180117ae4f5f4b42d7a797a","first_seen":"2025-11-04T14:36:20.934214Z","last_seen":"2026-04-10T03:04:23.218556Z","times_seen":38,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/js/common.js","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/js/common.js HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 19 Sep 2025 12:07:28 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 716\r\ncontent-type: application/javascript\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2170,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f6116db6842e56a64e38bec929bc2d10","sha1":"d197b6f1446fe941e9fb5a8cb6db69f062b00cb2","sha256":"71ae5f3993d4dd12caa744a89dfcfd695fb05f828b73b5d36598334b897673e9","sha512":"774fbe993290312882623081928ac75754adce0199a503d3c34ce4e376b981657736efe1796f4903354210d07d5ead7c742912ad9cd0b12de0c029f18e85e8e3","ssdeep":"","tlshash":"2941ddcc0ea38d794962c805ea7758c1fef15d61aa25f010f55c31a5248cb66116ccae","first_seen":"2025-11-04T14:36:20.909887Z","last_seen":"2026-04-10T03:04:23.231919Z","times_seen":38,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/index.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/index.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Jan 2023 16:26:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2789\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2789,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 115 x 58","md5":"ee6284e8ab015ada7763075b85c722d7","sha1":"40826abe00d54ceed725fff2d90d63043b875558","sha256":"662a02c554ce83d623a3f8b01a1fc02ad7238798d2207ac839f8d129ab3decdd","sha512":"f5deff0159b6a35a1bf0d715f8b9eefc2a7d44974fa1d7202d904fe1ac320779c160855185c6bc878c81589aa6784b29f6e892939a0f04b4bf32dfa688b9be7a","ssdeep":"","tlshash":"c2514cc1f3dc83cac0456138bd1ea7c7da4b0594495f30e2c117f8c76024386aab82f2","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-04-17T01:07:34.499116Z","times_seen":816,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/login_bg.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:42.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/login_bg.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 17:49:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3136\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3136,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 727 x 400","md5":"8f2b6b11eed51dab9f72371d7d77840b","sha1":"007e482d8743a72f5abeec0abd1cbf033d503a8d","sha256":"5879f5c218c342a06b8eccf5376bdc944d99167de692ceff87324dcffa388778","sha512":"e3b917b726aba3cdbb89da4f0914693448de5bceb42897e1dd48691d1b4499f5b2e998c30f5f27d469dd1371fac4b8ee371533925f8b5c2c4ee911b36416b3ab","ssdeep":"","tlshash":"6b516ced04d5d4b34002443d09fa9abefd68eb3f98fc0a2032f56e98063f8968c96058","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-17T01:07:34.500092Z","times_seen":690,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:43.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-UA-Compatible: IE=Edge\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en-US\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19026,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"fee58fa89f20641a4743cf4396399c03","sha1":"0d217a5fa452d8511d0f7180006f397d447e25b3","sha256":"6bd730050dc358b18500d55c76050690ff2bd09af73c1adf6599c0027314c64e","sha512":"eaf7322dcfa9eeb2e413847093fe1d3986f53360e4a7a15bf94516bca93e8922d025553bbe80982b6fe0e082fbeaa6be92a1e0502ed8bf2d951ce4d7ed16492f","ssdeep":"384:sAQHAsZkB98hWgz2Ug7O+ONDDIkxL3q+39:sF0IE2OA","tlshash":"528285045981ec3646638078d0eabe8ed3ac8532d356b46875df619bafc1c9c07b7b8d","first_seen":"2025-11-04T14:36:20.918161Z","last_seen":"2026-04-10T03:04:23.205041Z","times_seen":38,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=4A5A5AF0DC7FCD5B18ECA535D4ED72A4?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBA4AV1wMBQMBD1NcBlEFWQwJCFtaXgwGAVNaDgRVCV1dWwdUAFlRVgEQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQARSBgNQXAwFAw5dDwNSWgFWUFICWg9XAwAAWl0GUAgLAQwCBVBdV1cWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBW5RXgZXT0cSU1ReTVFOb1tYVFwAWVtfElVCXgAG\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-03-27T13:38:43.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/ARF;CIS3SID=4A5A5AF0DC7FCD5B18ECA535D4ED72A4?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBA4AV1wMBQMBD1NcBlEFWQwJCFtaXgwGAVNaDgRVCV1dWwdUAFlRVgEQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQARSBgNQXAwFAw5dDwNSWgFWUFICWg9XAwAAWl0GUAgLAQwCBVBdV1cWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBW5RXgZXT0cSU1ReTVFOb1tYVFwAWVtfElVCXgAG\u0026count=0\u0026max=0 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:38:43 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=95\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3d7e2776d847f37325da22658062337d","sha1":"90afe0ace063fa208e7d6271cb46012439b0ecd7","sha256":"6b37d6734e89a13174afc991f8ff99c44666b4d3332a88c151c448b322c9495b","sha512":"cc6d90a2c85c884d90b82b05ec5c2e9b6eabf27e4a45afb5f8e708041db1785fd3608bf7275b5284763faaa1a5a695e1115516bf0903e45cd6e7568fc3806851","ssdeep":"","tlshash":"1b800002c2c00e2bcb80a2e2a30802222f03cac8a82b3808822222382c0c80a8088cc2","first_seen":"2023-03-13T21:23:42Z","last_seen":"2026-07-14T06:07:00.127799Z","times_seen":38,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nisha-interiors.com/plala.orr/jpn/webmai1/sso/pf/images/loginfoot.gif","fqdn":"nisha-interiors.com","domain":"nisha-interiors.com","tld":"com"},"ip":{"addr":"192.185.129.39","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:41.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nisha-interiors.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:56:37 GMT","end":"Wed, 03 Jun 2026 03:56:36 GMT"},"fingerprint":{"sha1":"D5:E9:67:73:6E:E8:E5:61:1B:80:22:87:1C:15:E4:1F:E7:D4:64:8C","sha256":"97:B2:E2:50:F8:3C:22:FE:89:57:D6:01:E7:5B:4D:F3:10:AE:2B:2D:88:38:63:09:53:AC:79:C6:39:12:B6:74"}}},"request":{"raw":"GET /plala.orr/jpn/webmai1/sso/pf/images/loginfoot.gif HTTP/1.1\r\nHost: nisha-interiors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php\r\nCookie: PHPSESSID=68be83683abd1625c6455a1aae3884ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 29 Nov 2022 17:48:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2084\r\ncontent-type: image/gif\r\ndate: Fri, 27 Mar 2026 13:38:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 50","md5":"f18ea3b398955ba4080beed42679e55f","sha1":"2d4b5004226d17f2dc1ca235bd70c7457e818644","sha256":"34e87afc825b9f62cdfcc89db23898dfe09151904bca4debdb9aaef7d2cc4dcb","sha512":"f83ff10b8ceb61040ac3818af6de22663a978f4a9f80d0a3661f12052445817108b97e27103b050a3844656ad931b73e5a53901f4f197d361c38a0c9b8f53930","ssdeep":"","tlshash":"0f414a44501c4da8877b8bbf68e4e7c02e2b7d014ac44130bdb8345b73298973b64ca3","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-04-17T01:07:34.497142Z","times_seen":671,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"nisha-interiors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-27","alert":"Phishing Block","trigger":"nisha-interiors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5900/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:45.022Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5900\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TG0IcpHke6R+eLSDcNDG3g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":1113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:5903/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.277Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:5903\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zvH4Vi5gu2oE0zsw0ldrZw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:3389/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.289Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3389\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZnodfgRtZZ52PxxW91wfgw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"127.0.0.1:2112/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.410Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 127.0.0.1:2112\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nisha-interiors.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LPplIHxqJO9PtsvO5fuK6Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=39313f2470663f3d3b32332e313338392c37393d322c373931312e373131392e3e383b3b2e373b3c362e363236302c3539313824373235392e373235382e3233393a2e7066763f3e313133312f3232352c373938322d333133392e373132312f393938352e373b38302f313233382c3539323325352c31333a392f3a243739373825312e373b31392f33332e373933392d352c3e32333b2d352c373b3c362d3b243e3836322f3524373b333a2f372c3532353925352c353035302f35243031333a253f246060743531","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nisha-interiors.com/plala.orr/jpn/webmai1/index.php","date":"2026-03-27T13:38:48.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":"NTT DOCOMO, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=B64489DFC77243DE046168D6AC6AEB1A?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=39313f2470663f3d3b32332e313338392c37393d322c373931312e373131392e3e383b3b2e373b3c362e363236302c3539313824373235392e373235382e3233393a2e7066763f3e313133312f3232352c373938322d333133392e373132312f393938352e373b38302f313233382c3539323325352c31333a392f3a243739373825312e373b31392f33332e373933392d352c3e32333b2d352c373b3c362d3b243e3836322f3524373b333a2f372c3532353925352c353035302f35243031333a253f246060743531 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nisha-interiors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Fri, 27 Mar 2026 13:38:48 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":1,"connect":17,"send":0,"wait":18,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}