{"report_id":"b2287bc2-9a2a-4e9c-9769-3e40c1302804","version":0,"status":"done","tags":[],"date":"2026-08-17T19:41:09Z","url":{"schema":"http","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"title":"ぷらら Webメール","dom":{"size":13261,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4414)","md5":"ae3ff8e05300b0e0d76c237b85fdec73","sha1":"5bf0842ef1027078007ed010f8f05350d579d9cc","sha256":"abb855dbd69714745a0f2c8e1dc6138069abf1cb94c19a038f26147b72044e29","sha512":"e20cab4d4e2bdafe401027e0732db1a2c32d3e5ce95c023f4d0bf8919f4ab936c1f06d8d4ce03d43330cc3d4281df53e99d4a29fc56c086343cc31b685600df3","ssdeep":"192:4nP6MdP3vMO7hgc0GQnVynD+rMefQwFt0:4nP6ORgcLQnVICrMefQwn0","tlshash":"ec52c8007ae43e0f5c910a60d2786edaafa1501fd7618dc8795ce5792f8874a9c3f9bc","dom_hash":"domhash63e6158fc521b05cf5ddfee50108e80a","first_seen":"2026-08-17T19:41:14.510933Z","last_seen":"2026-08-17T19:41:14.510933Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":0,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T19:41:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tactica7.com.mx","ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"2024-02-27","domain_rank":0,"first_seen":"2026-02-09T22:51:30.927879Z","last_seen":"2026-08-17T08:38:32.840537Z","alert_count":28,"request_count":14,"received_data":148990,"sent_data":8328,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"sec.plala.or.jp","ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"domain_registered":"1996-07-24","domain_rank":0,"first_seen":"2020-03-20T01:37:55Z","last_seen":"2026-08-17T08:38:32.911478Z","alert_count":0,"request_count":18,"received_data":1161607,"sent_data":27370,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5311ff0406f731589398ab74a99e83b","sha1":"3ca468e030de29c1513cfde099c12a48be30d4b7","sha256":"f0b947ff8a052a4310acf449bd33910aef0ad3910d49a36a6f85d33cf3782769","sha512":"1da40a49a37169b88d7a75b7927845160a4d7cbf89eeed8ebc5124765136847fd09d11b1095771a116acc72459529682c7aaa10eaaad3632642597dfc73f25f0","ssdeep":"384:cz08gdkWeCYvqhFBfKjLx7NTbx7k+N9qcKCOZJbQrsZ8Dc4lVOIJ9Ns9DWZMFKPN:ck4qhFBfKHx74KuT1sHPKjtZtuaO2M","tlshash":"28b37ace04d0d4f2607adc68496e058bfa2c7cf7834441758244ae9cadb2e45e7e6f7a","size":109981,"data":"","first_seen":"2026-08-17T19:41:14.569345Z","last_seen":"2026-08-17T19:41:14.569345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"00b65d000283f5f80295c17d8e45bfbb","sha1":"4c646fe85dd8637dc32b5f4249fbb64705095c88","sha256":"5c9eb150ba387998b9662582ccfb993f31c4635e3b662fd11299f96c865afc49","sha512":"9f4df4ce2e7e5905216bd039465369f3595c1ff4ce480ae6f69862772d38e07d575b21654b8e52fb0624caad97756b604560c187c6f2a0ed7a31f0d75ca20cd6","ssdeep":"","tlshash":"dd9002666191692a42c91316956151c13a321426a452244298551444011295dc591686","size":47,"data":"","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.570958Z","times_seen":650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b8c682321966843b999411400c176af","sha1":"a0aa94ec855de386a3680e0b9c3337b7cd019fd4","sha256":"a58105c94c2a6c1ea3cc4e32bae34a8ca4a33f3c0f7764455f536fa258c7cc32","sha512":"c043be3fb2b9232d8cab5fe8d71325a7204f3ee79c9d8a826dfb26f8b417fe64df8df7e406f465b6a4aced82d276058e1acf04ee4d4f89c7a567b86315132c97","ssdeep":"","tlshash":"8f600000c0cf3c30030030003c000c00000c0c000f3000003c0300000003c0fc0f0333","size":15,"data":"","first_seen":"2023-05-22T12:54:30Z","last_seen":"2026-08-17T19:41:14.571557Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3d3a2e2468716d7d3f4e696c7778266a736d3d446b6e7778246a71607d3f466b7a6d6e6d7a24687b603f466b7065666f78273238333336","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"447e2141eaf943ff5044d63f4a254646","sha1":"1e62b6d9399d8de953bc9b126b1a606d16fc0820","sha256":"e71781e9f35614bfbc62a9c1d24b8f61da6b528d57c0b5829c3375a921312e58","sha512":"5f9eee52cf5367c380ac8be6e420d341f8bba33ea39f758ec578b3672dc9d67733ac49ebd1a4c39374f76dc8ff8677e9c3b56b7435b9678679d0168e7105be99","ssdeep":"3072:sIWkcoQ4qhFBSwmibd+J+ufVltKVBu2qzmu:DWkVwNxQ+utltKVBu2qzmu","tlshash":"f1e4a7cc4ac5d063429e6c90fe9b19cfa93ca8f3c2884317d1847e9c54f255496faead","size":685817,"data":"","first_seen":"2026-08-17T19:41:14.535634Z","last_seen":"2026-08-17T19:41:14.535634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=437CF995474CC391972C86D363CF2B07?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBF0HA1xcDQcBAQJfAFAJDg4KB1NeWQwFBgFXXFYDAgkKClFTXFoCBwYQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQAYAAwNQW1RQCF5YW1VSCgECAgUFVQ5UAQNZDgsHBgkKVVBRD1cJBFAWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBXVRXhdAHldWDUIHQ2pXUVRVWlEBUx5RQA0DVA%3D%3D\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e60912c02dfd26e358aedc4f85f7e35","sha1":"bc0aefba19a79ead8924ca8109077b2d8b9557ee","sha256":"e6cb9d5e676a9bf250585ca83d7a1e1514f458ebd2ef932e43edbd60d5180d53","sha512":"cba085fe14c48fee5b0437972765168c01a7a08f77c7a247500632098037393f81e4b008f59591d70c309739cbd18c3476ac40539b4312b88514211ccf525f9f","ssdeep":"","tlshash":"38800403c1c01d15c7405751530001011f13c5c454171404451451151c0c4044004c41","size":35,"data":"","first_seen":"2024-02-28T16:31:58Z","last_seen":"2026-08-17T19:41:14.520806Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/js/tags.js","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"229f1cb11d0d21b6c1e0660dfb0b13e4","sha1":"8f2f3727896b72e1822f040c124ca0afbb79d8f5","sha256":"274ece4bec63f087d346cc5702cbdfeec550c5393c73eb8955a101cfb8e87a35","sha512":"4ee662b820472fc6cdde66cb3766f5156be2903e8eb4be2b1d4c7a32e5a717a6796fd1eb753f8aa51a8679ac0562291eba6bec2f4a44c3acc3d2deaf4a990cb0","ssdeep":"768:UFTgUbgUVgUcgUZgUYgUogUbgUXgU4gUnyGcWOPZi7Aj5:YiPUsj5","tlshash":"eba37ddc39a5a912b54f2ce15e2d484b322cd8be4b83c73180117ae4f5f4b42d7a797a","size":99612,"data":"","first_seen":"2025-11-04T14:36:20.934214Z","last_seen":"2026-08-17T19:41:14.544112Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9084e4d0ff7d577fe29d31b9c8a71b2e","sha1":"d96accdc535ebd9342d48611e0050ea8993cd947","sha256":"73d1f6284eb5f2ae44c1b7345783e222ba471eca382fd605ebe6ad528c6cad2f","sha512":"a024f670ea9b45efebce84cada7e374eb82474c0bb828b69472f652fde0594893c8012538439d384d4704cc2d839616cf9e4e01a7b7d77fa263ba73c25b31ed1","ssdeep":"","tlshash":"edf0462adf84080f47d6032a972b01cabf764bb53c99188c185c7fa4141082c61cbbe9","size":570,"data":"","first_seen":"2026-08-17T08:38:35.087782Z","last_seen":"2026-08-17T19:41:14.572152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eff409565ed1d22c17d73ce417bd15","sha1":"ae526f9ce16489f0ca53977b7722f56806555342","sha256":"d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3","sha512":"505ce0ccebf07887dab601f952ee07414468a5d4e822ecd45303ff24ae8793ede9c917e0c863a3756e5c214eb82df576b178397c5113a00ff8a42692f7b2c0a2","ssdeep":"","tlshash":"fb8000c20ca2c0b0b0a20c2e00283a008c0e0b38a22033a320a0a002a008003c0302ca","size":32,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-08-17T19:41:14.573595Z","times_seen":18090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b002395e6abf3816b9ec949e6a8f0864","sha1":"45cd1c803c7758beedeeb5c69e2eb0b8a938cf3e","sha256":"0c1c164cc26e8c3037b0ee37ce177634f1ac7effa008cf36e873e184f72e010a","sha512":"7f641b8cbed30f57c043af30f4c3350709a6ca013231edf728edeed0cb8281ea2c906920876298faa1474c75919b65bd86ccc7ce9a136d5b5fd67e4660fdebff","ssdeep":"","tlshash":"dcc02b4f0c866b4090932685b2b695a402f53c10701c01c4950724a13adc24071b0e06","size":134,"data":"","first_seen":"2026-08-17T19:41:14.566555Z","last_seen":"2026-08-17T19:41:14.566555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"779b1fa38e8ac2a8d561761bf4fc82bc","sha1":"6d2c34940c80486d7574792718abef84a6b7081a","sha256":"44b799851c02e98db3db23d805595a42597d9f24f0e6cc543bbfd107571ba1f3","sha512":"de289306c249a1c63317ffcf16df490464c259728a4aeb2ad9799f19c01fd2574981506cffad6cbd313c7d742dae3e237c34c32333b683e8238dff112b91f663","ssdeep":"","tlshash":"14c02b4dce8475848041116835ac4418cd0c0ec033bc2530660a90801fc80c08bc458a","size":134,"data":"","first_seen":"2026-08-17T19:41:14.539744Z","last_seen":"2026-08-17T19:41:14.539744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdc5ba26162c66b7378ca005e4f704ad","sha1":"29ad8fb76e65689367f59d72bb76df6d73ea396e","sha256":"b9e67074b34b65c32becee4dfa3d0d279048111eeddd91237b926a519e071bbd","sha512":"bfeefc66bbeedf6ce384d7c33b9ad9c185f25c08194f2d469cf55a78e666ca2d28e5908e6958c3fa4085fe19d4f081935ff0945a1dde02cdada8b6f723510cfd","ssdeep":"384:cOTbx7k+N9qcKCOZJbQrsZ8Dc4lVOIJ9Ns9DWZMFKPpuphbCy1fkVvR08gdkWeCk:chK/cGu4qhFBfKHx77PKjtZtpaO2","tlshash":"b1b37bce04d0d4f2607adc68496e054bfa2c7cf7834441758244aeacadb2e55e7e2f7a","size":107868,"data":"","first_seen":"2026-08-17T19:41:14.574328Z","last_seen":"2026-08-17T19:41:14.574328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/js/common.js","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6116db6842e56a64e38bec929bc2d10","sha1":"d197b6f1446fe941e9fb5a8cb6db69f062b00cb2","sha256":"71ae5f3993d4dd12caa744a89dfcfd695fb05f828b73b5d36598334b897673e9","sha512":"774fbe993290312882623081928ac75754adce0199a503d3c34ce4e376b981657736efe1796f4903354210d07d5ead7c742912ad9cd0b12de0c029f18e85e8e3","ssdeep":"","tlshash":"2941ddcc0ea38d794962c805ea7758c1fef15d61aa25f010f55c31a5248cb66116ccae","size":2170,"data":"","first_seen":"2025-11-04T14:36:20.909887Z","last_seen":"2026-08-17T19:41:14.553414Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4926e83af43f2f400d8b55fc51b52ef2","sha1":"93e99447ad302c20568d1ade27c8f8e008602dae","sha256":"4a34784b450bf546cf0323eb81d5219031f95e68062b36c745cd5e14fbe3896b","sha512":"2b2f630805571db33ea809b2e6bcf940c58edf3aacb2161d231d323ed5c26013452dded2654e865e735ec80f4b564b6fc297aacb09729bcf8086a86580a440a5","ssdeep":"768:dUp/h31zC7tsOrHI5sCyE7EdzwPfhc9IjF0CPuShdRJY2WrJP0rap:dUpp31lUZE7Edic9I2CPuGCcap","tlshash":"8524d1f939e0c872586e2c905a0a0acfa41cd5f783499277cb146f9c74b8b60b3d5d7a","size":229830,"data":"","first_seen":"2026-08-17T19:41:14.564205Z","last_seen":"2026-08-17T19:41:14.564205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/login_bg.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.671Z","timestamp":1786995634671,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/login_bg.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 30 Nov 2022 04:19:30 GMT\r\nETag: \"72232ba-c40-5eea8692c9880\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3136\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3136,"size_decoded":3414,"mime_type":"image/gif","magic":"GIF image data, version 89a, 727 x 400","md5":"8f2b6b11eed51dab9f72371d7d77840b","sha1":"007e482d8743a72f5abeec0abd1cbf033d503a8d","sha256":"5879f5c218c342a06b8eccf5376bdc944d99167de692ceff87324dcffa388778","sha512":"e3b917b726aba3cdbb89da4f0914693448de5bceb42897e1dd48691d1b4499f5b2e998c30f5f27d469dd1371fac4b8ee371533925f8b5c2c4ee911b36416b3ab","ssdeep":"","tlshash":"6b516ced04d5d4b34002443d09fa9abefd68eb3f98fc0a2032f56e98063f8968c96058","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.514935Z","times_seen":692,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/top_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.984Z","timestamp":1786995635984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/top_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107964,"size_decoded":19700,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16596)","md5":"65d13937c599f00848cf2bd65ed9bcf9","sha1":"8956a62b00711cf718298d72e488fe5dee39cfc6","sha256":"30c5c1413628b56354ce6efad5931a1fe95172b3b8730f357d93d13c603fd5c8","sha512":"f057e26234b91a0fb00c046b49e8fcde808905e13773ec0ce3fee9ff965abfb3bc0a55d35e4aef7a228e6e3e45c9e430b53d635b9cc09425789419d7d8309c41","ssdeep":"384:cOTbx7k+N9qcKCOZJbQrsZ8Dc4lVOIJ9Ns9DWZMFKPpuphbCy1fkVvR08gdkWeCT:chK/cGu4qhFBfKHx77PKjtZtpaOt","tlshash":"dbb37bce04d0d4f2607adc68496e054bfa2c7cf7834441758244aeacadb2e55e7e2f7a","first_seen":"2026-08-17T19:41:14.516923Z","last_seen":"2026-08-17T19:41:14.516923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":23,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ARF;CIS3SID=437CF995474CC391972C86D363CF2B07?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBF0HA1xcDQcBAQJfAFAJDg4KB1NeWQwFBgFXXFYDAgkKClFTXFoCBwYQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQAYAAwNQW1RQCF5YW1VSCgECAgUFVQ5UAQNZDgsHBgkKVVBRD1cJBFAWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBXVRXhdAHldWDUIHQ2pXUVRVWlEBUx5RQA0DVA%3D%3D\u0026count=0\u0026max=0","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-08-17T19:40:36.390Z","timestamp":1786995636390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/ARF;CIS3SID=437CF995474CC391972C86D363CF2B07?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026pageid=99998\u0026sera_parametere=UkALUQwCBVJZXApSUlsAVgwGV1YMB1UHWw0NBwQKXAUDUQRTDgZRA11aCxYRSwVdWkBDF0oQB3QdDnoVVXwdBgRaRQZVUFlVVk1LFVF8HQN2ABNUfRAGAFBWS0QRHQtwEQd0Rg5xElRRBF0HA1xcDQcBAQJfAFAJDg4KB1NeWQwFBgFXXFYDAgkKClFTXFoCBwYQDVZbV1UFDQgGAQENAAQID1sJVwwIDB9SQ18IQAYAAwNQW1RQCF5YW1VSCgECAgUFVQ5UAQNZDgsHBgkKVVBRD1cJBFAWWVAFAVIODg0SWV9eFAQSQFEEAQlbAQASXFsLRVsIcllKXF5fGh5aQgkBBVcfV1tDBXVRXhdAHldWDUIHQ2pXUVRVWlEBUx5RQA0DVA%3D%3D\u0026count=0\u0026max=0 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=96\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35,"size_decoded":541,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8e60912c02dfd26e358aedc4f85f7e35","sha1":"bc0aefba19a79ead8924ca8109077b2d8b9557ee","sha256":"e6cb9d5e676a9bf250585ca83d7a1e1514f458ebd2ef932e43edbd60d5180d53","sha512":"cba085fe14c48fee5b0437972765168c01a7a08f77c7a247500632098037393f81e4b008f59591d70c309739cbd18c3476ac40539b4312b88514211ccf525f9f","ssdeep":"","tlshash":"38800403c1c01d15c7405751530001011f13c5c454171404451451151c0c4044004c41","first_seen":"2024-02-28T16:31:58Z","last_seen":"2026-08-17T19:41:14.520806Z","times_seen":28,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=39383d242460607e3f31266863633d312670657e3f362c31312c373b263a372e3e3826373a2e37312c3a382e37392e38382e35312c38362c37392c3a3c2e3632263d312e373b2c303a2e353b2c38352c353b2e30362c37392c383a2e3e322e373e243d3b2c3a3724373b2e3a33","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:46.772Z","timestamp":1786995646772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026je=39383d242460607e3f31266863633d312670657e3f362c31312c373b263a372e3e3826373a2e37312c3a382e37392e38382e35312c38362c37392c3a3c2e3632263d312e373b2c303a2e353b2c38352c353b2e30362c37392c383a2e3e322e373e243d3b2c3a3724373b2e3a33 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Mon, 17 Aug 2026 19:40:46 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":407,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/index.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.221Z","timestamp":1786995634221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/index.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 05 Jan 2023 02:56:52 GMT\r\nETag: \"72232b3-ae5-5f17b73f10500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2789\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2789,"size_decoded":3066,"mime_type":"image/gif","magic":"GIF image data, version 89a, 115 x 58","md5":"ee6284e8ab015ada7763075b85c722d7","sha1":"40826abe00d54ceed725fff2d90d63043b875558","sha256":"662a02c554ce83d623a3f8b01a1fc02ad7238798d2207ac839f8d129ab3decdd","sha512":"f5deff0159b6a35a1bf0d715f8b9eefc2a7d44974fa1d7202d904fe1ac320779c160855185c6bc878c81589aa6784b29f6e892939a0f04b4bf32dfa688b9be7a","ssdeep":"","tlshash":"c2514cc1f3dc83cac0456138bd1ea7c7da4b0594495f30e2c117f8c76024386aab82f2","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-08-17T19:41:14.526819Z","times_seen":818,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":417,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/loginfoot.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.226Z","timestamp":1786995634226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/loginfoot.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 30 Nov 2022 04:18:30 GMT\r\nETag: \"72232b5-824-5eea865991180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2084\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2084,"size_decoded":2361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 50","md5":"f18ea3b398955ba4080beed42679e55f","sha1":"2d4b5004226d17f2dc1ca235bd70c7457e818644","sha256":"34e87afc825b9f62cdfcc89db23898dfe09151904bca4debdb9aaef7d2cc4dcb","sha512":"f83ff10b8ceb61040ac3818af6de22663a978f4a9f80d0a3661f12052445817108b97e27103b050a3844656ad931b73e5a53901f4f197d361c38a0c9b8f53930","ssdeep":"","tlshash":"0f414a44501c4da8877b8bbf68e4e7c02e2b7d014ac44130bdb8345b73298973b64ca3","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.530083Z","times_seen":673,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":417,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/loginmiddle.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.672Z","timestamp":1786995634672,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/loginmiddle.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 30 Nov 2022 05:03:20 GMT\r\nETag: \"72232b9-82-5eea905ef3600\"\r\nAccept-Ranges: bytes\r\nContent-Length: 130\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":130,"size_decoded":405,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 5","md5":"055cf0e751968aa1eaf4ab26b6267caa","sha1":"1fd229e193c7bac7dece4979e4211bef5022bb0e","sha256":"4e6fff51beaec33a7639e509aa82466c31cabfdf23ea24850edb76d873596b8c","sha512":"970626c34cd8ea720e109e7eb22c0898e7d971afcb8a69ff78f093db395aed14ca2fb1dfd3535cd4d2499137889f2550477b2f14123016e45990b3dc1abe1f74","ssdeep":"","tlshash":"34c09b6dc860642b504d75734417e1cd760947e85c0618dad5756595a5086b1f6301d9","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.532621Z","times_seen":638,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/favicon.ico","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.992Z","timestamp":1786995634992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Jul 2026 04:10:10 GMT\r\nETag: \"6b45c86-1bbc-656dad95eec80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7100\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7100,"size_decoded":7381,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"07cb1d92793019925f0a603b9c8d64fb","sha1":"0f06cffda68ba09e70a2032ceb493625682d3ddc","sha256":"f295310e6f17aba3db2a3d92f75bc03d88652a827638f447d49c7df41c839c45","sha512":"a4335c424caefb9243a94b39df3ea9765314167a3241a74b2081e8f787ca09bdf86aa33bed8a70fdd948e9def872f7a44b2fe2f65b24fe4ab005a762d964971a","ssdeep":"192:sCDhdOG9izkLnLcpE35AUtRS7HaFIj1Eiwe:XDhdOPzBmJh2HMIj1Eiwe","tlshash":"6ee1aea3475225efc9412876bac0c951fb74673a3b48a4cb23e0477a187dbd4b1cbc46","first_seen":"2026-08-17T08:38:35.058161Z","last_seen":"2026-08-17T19:41:14.533541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3d3a2e2468716d7d3f4e696c7778266a736d3d446b6e7778246a71607d3f466b7a6d6e6d7a24687b603f466b7065666f78273238333336","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.230Z","timestamp":1786995635230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/check.js;CIS3SID=D09EF76505F6B07175A48608A4B32953?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3d3a2e2468716d7d3f4e696c7778266a736d3d446b6e7778246a71607d3f466b7a6d6e6d7a24687b603f466b7065666f78273238333336 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 406c95408980b884\r\nX-Robots-Tag: noindex, nofollow\r\nSet-Cookie: thx_guid=e172f7d040838c7ade1992de29f5b448; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;\r\nP3P: CP=IVAa PSAa\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":[{"name":"thx_guid","value":"e172f7d040838c7ade1992de29f5b448","quoted":false,"path":"/","raw_expires":"","max_age":155520000,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"thx_guid=e172f7d040838c7ade1992de29f5b448; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685817,"size_decoded":148892,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5423)","md5":"447e2141eaf943ff5044d63f4a254646","sha1":"1e62b6d9399d8de953bc9b126b1a606d16fc0820","sha256":"e71781e9f35614bfbc62a9c1d24b8f61da6b528d57c0b5829c3375a921312e58","sha512":"5f9eee52cf5367c380ac8be6e420d341f8bba33ea39f758ec578b3672dc9d67733ac49ebd1a4c39374f76dc8ff8677e9c3b56b7435b9678679d0168e7105be99","ssdeep":"3072:sIWkcoQ4qhFBSwmibd+J+ufVltKVBu2qzmu:DWkVwNxQ+utltKVBu2qzmu","tlshash":"f1e4a7cc4ac5d063429e6c90fe9b19cfa93ca8f3c2884317d1847e9c54f255496faead","first_seen":"2026-08-17T19:41:14.535634Z","last_seen":"2026-08-17T19:41:14.535634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":265,"connect":21,"send":0,"wait":25,"receive":65,"ssl":273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=2","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.238Z","timestamp":1786995635238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=2 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":475,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-17T21:42:52.078264Z","times_seen":22523,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":258,"connect":21,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.969Z","timestamp":1786995635969,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":639,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"779b1fa38e8ac2a8d561761bf4fc82bc","sha1":"6d2c34940c80486d7574792718abef84a6b7081a","sha256":"44b799851c02e98db3db23d805595a42597d9f24f0e6cc543bbfd107571ba1f3","sha512":"de289306c249a1c63317ffcf16df490464c259728a4aeb2ad9799f19c01fd2574981506cffad6cbd313c7d742dae3e237c34c32333b683e8238dff112b91f663","ssdeep":"","tlshash":"14c02b4dce8475848041116835ac4418cd0c0ec033bc2530660a90801fc80c08bc458a","first_seen":"2026-08-17T19:41:14.539744Z","last_seen":"2026-08-17T19:41:14.539744Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear1.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=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","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:36.309Z","timestamp":1786995636309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear1.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=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 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: image/png;charset=UTF-8\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=97\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":500,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-17T21:42:52.078264Z","times_seen":22523,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.932Z","timestamp":1786995635932,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-UA-Compatible: IE=Edge\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en-US\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19026,"size_decoded":7346,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"fee58fa89f20641a4743cf4396399c03","sha1":"0d217a5fa452d8511d0f7180006f397d447e25b3","sha256":"6bd730050dc358b18500d55c76050690ff2bd09af73c1adf6599c0027314c64e","sha512":"eaf7322dcfa9eeb2e413847093fe1d3986f53360e4a7a15bf94516bca93e8922d025553bbe80982b6fe0e082fbeaa6be92a1e0502ed8bf2d951ce4d7ed16492f","ssdeep":"384:sAQHAsZkB98hWgz2Ug7O+ONDDIkxL3q+39:sF0IE2OA","tlshash":"528285045981ec3646638078d0eabe8ed3ac8532d356b46875df619bafc1c9c07b7b8d","first_seen":"2025-11-04T14:36:20.918161Z","last_seen":"2026-08-17T19:41:14.542057Z","times_seen":40,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.953Z","timestamp":1786995635953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*, 2kamd3p6/406c95408980b8848993ff28bc16c0a0ab096a7e2acb9bab\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tactica7.com.mx\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nLast-Modified: Mon, 17 Aug 2026 19:40:36 GMT\r\nExpires: Sat, 16 Aug 2031 19:40:36 GMT\r\nEtag: e747f49f87304496bd85f44d131d88cd\r\nCache-Control: private, must-revalidate, max-age=0\r\nAccess-Control-Allow-Origin: https://tactica7.com.mx\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":531,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-17T21:42:52.078264Z","times_seen":22523,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear3.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=3c3c382424677a3b3f636235646562313032353c31363334633434603130333b6e316a60353a323e646662363b39336266246570343d3335333134613d37353b6c3c39363a67366a31336230636131623360613c663524657a36713f39373133303f3b3037343b313124676e5d683d353363333b6166336633656061313b39336e383f37313a37693236616761643035333534693566342675676e74354f6571692e7f656e703f646e746d726b7065253241253a326f70253030716b656b6c637a2e6f6e6a5d6a35633039303a393234383061383b3732616163323569373566306a313530373b3063606266303139382667783c3f633539676264616d6035346c693d6366663b3c333b3463306236663730613b30266778373d3b643b6636643f6a69303b606739333b3666643863383432313f613635313262246770353d3b3d3831343167336a3b316261343861653932653a60346038603767343e3432246d703f713f333739363a30353532333330302e30246361643f3133303f313424626e663f3b24686e6a3f6460326538356567643d373360383739363b3f3063333b6c3d6464303b693264266864746e3d303837393839246260763f31","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:37.056Z","timestamp":1786995637056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=3c3c382424677a3b3f636235646562313032353c31363334633434603130333b6e316a60353a323e646662363b39336266246570343d3335333134613d37353b6c3c39363a67366a31336230636131623360613c663524657a36713f39373133303f3b3037343b313124676e5d683d353363333b6166336633656061313b39336e383f37313a37693236616761643035333534693566342675676e74354f6571692e7f656e703f646e746d726b7065253241253a326f70253030716b656b6c637a2e6f6e6a5d6a35633039303a393234383061383b3732616163323569373566306a313530373b3063606266303139382667783c3f633539676264616d6035346c693d6366663b3c333b3463306236663730613b30266778373d3b643b6636643f6a69303b606739333b3666643863383432313f613635313262246770353d3b3d3831343167336a3b316261343861653932653a60346038603767343e3432246d703f713f333739363a30353532333330302e30246361643f3133303f313424626e663f3b24686e6a3f6460326538356567643d373360383739363b3f3063333b6c3d6464303b693264266864746e3d303837393839246260763f31 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Mon, 17 Aug 2026 19:40:37 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=96\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":406,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=1","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.239Z","timestamp":1786995635239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ck=0\u0026m=1 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":475,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-08-17T21:42:52.078264Z","times_seen":22523,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":257,"connect":21,"send":0,"wait":21,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=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","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:37.055Z","timestamp":1786995637055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jac=1\u0026je=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 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:37 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":398,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=3b3e2e6e71603f3866356160633538346636363c3a303538616363343a6664606b3c6a35676037","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","date":"2026-08-17T19:40:36.089Z","timestamp":1786995636089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jf=3b3e2e6e71603f3866356160633538346636363c3a303538616363343a6664606b3c6a35676037 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":398,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ja=3c3a312424613f3824783d3224663d31323a3070333030342461643f3930383270393830362471707b3f307a32266470723f312433323a302e3132303c2e31303038243332303624333038322e313032342e313a3a302e313232362e382e3024657c353035643739663131363b653662663030316036346266333a356a3261643b6b3c246f6c3f3a247163663f3234266c6a3d6076747273273343273a4425304e7c6961766b6169352c636d6f2e6d78253046786e616e6127324468786c25304e7f6d606f636b392730466b6c6465782e72687824706e3d3726726a356738323a6c6e63373737393b31663667626538393b336d603463393b323b326c24686a356b39673b34353032333261666638326667653b343963666736353338366330392e62716d3f4e616c7778246873623d466b726d646f7a25303033313c246a71677d354e6b6c777024687360773d4669726766677a266c68613d3a24666f747235382e7678663f5d5641266f637468723d35316e37343a6536623134383a62646c6e6a3a3b613b3134646666366637306633326967336636346166643c3039313d3e6a3b6431606b343537603066653266\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.957Z","timestamp":1786995635957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026ja=3c3a312424613f3824783d3224663d31323a3070333030342461643f3930383270393830362471707b3f307a32266470723f312433323a302e3132303c2e31303038243332303624333038322e313032342e313a3a302e313232362e382e3024657c353035643739663131363b653662663030316036346266333a356a3261643b6b3c246f6c3f3a247163663f3234266c6a3d6076747273273343273a4425304e7c6961766b6169352c636d6f2e6d78253046786e616e6127324468786c25304e7f6d606f636b392730466b6c6465782e72687824706e3d3726726a356738323a6c6e63373737393b31663667626538393b336d603463393b323b326c24686a356b39673b34353032333261666638326667653b343963666736353338366330392e62716d3f4e616c7778246873623d466b726d646f7a25303033313c246a71677d354e6b6c777024687360773d4669726766677a266c68613d3a24666f747235382e7678663f5d5641266f637468723d35316e37343a6536623134383a62646c6e6a3a3b613b3134646666366637306633326967336636346166643c3039313d3e6a3b6431606b343537603066653266\u0026jb=39393b246e733f456d78696e6e61253246372e382732322855696c66677573273a38465627303239322c302731422532305569663434273340253032703434273b4a2d303270742d31433131362e30292530304f6763696f273244303833303239383927303244617067666d7a2532463131342632 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=98\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":406,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3b3e2e6e71633f3e3a3630663b6264663937623c3030346134373b366d6139363d6b3e3b60673b","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.967Z","timestamp":1786995635967,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/clear.png?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026jb=3b3e2e6e71633f3e3a3630663b6264663937623c3030346134373b366d6139363d6b3e3b60673b HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":398,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/index.php","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T19:40:33.614Z","timestamp":1786995633614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/index.php HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:33 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279; path=/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"215f5af70f90955ad8d0bbb2d418e279","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=215f5af70f90955ad8d0bbb2d418e279; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8863,"size_decoded":9233,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"61f3988a22998a5340c15c9ee9b722cb","sha1":"f728473795527246d9bb1d9ad3e45d48b9a0e9a3","sha256":"5a9c1e2d60814839c2491a56bb27d23c072a5d106bf400f38958c78e3f060560","sha512":"36039dd5a6be6b7528fad72e953fef22640dfd520ffda357e920cbb8052d5af98acbb48f7a4b26bb6e644ca3b030cc38f7993a227d58084cf9fd244bc04b38fe","ssdeep":"96:9DPX1h9tD9t8np46hCDNEaLFNb3Kb3OGmi+H951wFrqNbYLXo9T3O78H1HYoRbDw:9nP6p4Pm3VyOUjgcGj","tlshash":"52021e087ae43b4b59015670d3642e879fe2542fd7224c48b45d92be1f48b8e8c7babc","first_seen":"2025-11-04T14:36:20.92044Z","last_seen":"2026-08-17T19:41:14.543067Z","times_seen":55,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":5,"connect":107,"send":0,"wait":136,"receive":3,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/js/tags.js","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.208Z","timestamp":1786995634208,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/js/tags.js HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:33 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 19 Sep 2025 21:39:44 GMT\r\nETag: \"7240c31-1851c-63f2e4ed6a800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 99612\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":99612,"size_decoded":99898,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16159), with CRLF line terminators","md5":"229f1cb11d0d21b6c1e0660dfb0b13e4","sha1":"8f2f3727896b72e1822f040c124ca0afbb79d8f5","sha256":"274ece4bec63f087d346cc5702cbdfeec550c5393c73eb8955a101cfb8e87a35","sha512":"4ee662b820472fc6cdde66cb3766f5156be2903e8eb4be2b1d4c7a32e5a717a6796fd1eb753f8aa51a8679ac0562291eba6bec2f4a44c3acc3d2deaf4a990cb0","ssdeep":"768:UFTgUbgUVgUcgUZgUYgUogUbgUXgU4gUnyGcWOPZi7Aj5:YiPUsj5","tlshash":"eba37ddc39a5a912b54f2ce15e2d484b322cd8be4b83c73180117ae4f5f4b42d7a797a","first_seen":"2025-11-04T14:36:20.934214Z","last_seen":"2026-08-17T19:41:14.544112Z","times_seen":40,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/loginhead.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.225Z","timestamp":1786995634225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/loginhead.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 30 Nov 2022 04:18:20 GMT\r\nETag: \"72232b6-c61-5eea865007b00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3169\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3169,"size_decoded":3446,"mime_type":"image/gif","magic":"GIF image data, version 89a, 543 x 58","md5":"590e4aee24ab9e6f026d374ff67e5daa","sha1":"dfbfc73476f860f4bc1a977b9612456978fd5bae","sha256":"0be823c43133470e457a8066e02ef661adbe9b3d08e43a11ebeda87562fe361b","sha512":"4e2c492ccb3dd3834fe8c34be9fcd0a67dcdfda5c697358f51bdd390cbbcb566551e69e0c29c86ab2e83595c37e90877591241858a9726266cb9cad9cf5ba236","ssdeep":"","tlshash":"76516dfc58f0c825ac94e7770c16d8627f5a9018574964233168b6bfc54fe2836658fd","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.546909Z","times_seen":639,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":417,"dns":0,"connect":109,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/login.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.667Z","timestamp":1786995634667,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/login.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 05 Jan 2023 02:50:20 GMT\r\nETag: \"72232b4-1a8-5f17b5c939300\"\r\nAccept-Ranges: bytes\r\nContent-Length: 424\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":424,"size_decoded":700,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"47e5e2303fca8b31ed4fc0e4592eb05e","sha1":"926791b0c9bea9eead7e6b7e596f078907bf2ef1","sha256":"ec2716d4c90cf8b58b22978f562c937382d76f259fbd5a82b2738ab6ccba0b51","sha512":"023ec0b4cc3572cd71b7b9232a1214311e29d9e25a5cc2c86e7aea248222d87caee50319dd9b657e94a358aca87672bc3f8aa1c4c046affba6b42514d38a06bb","ssdeep":"","tlshash":"f8e02393d366674aac2fe374071814218c07b615b70d505f6844e8122e1977839d5f60","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-08-17T19:41:14.547868Z","times_seen":762,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/css/base.css","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.211Z","timestamp":1786995634211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/css/base.css HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 19 Sep 2025 21:38:12 GMT\r\nETag: \"71e3a52-3427-63f2e495ad900\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13351\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13351,"size_decoded":13630,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5221f8060b2210f7a73bc189eb6da8d1","sha1":"9e20dc7cc7e81bb75d1c0d2c57cc925749ec9203","sha256":"ad1b832dc8a4bdb7535143d71c8c8737129b5f9c40295727544ca157b45103e3","sha512":"1fd3ee347ebd243e73812e3db11db80b3b58ef50767c8c8378d46380c24a6ce6a2580fd39505a8de938397cde40bdc0daa72b6eea1590ca11718f0d5b4da5570","ssdeep":"192:DBbcQ2GGDWypz9TV3LHQFvAlsJqTD3W+tDfu:DMVwqTD3WN","tlshash":"0f52f26daed9590f224ed4c0ebf8b164fa186089dd691eb4b59d2738f30d1b4203dbc9","first_seen":"2025-11-04T14:36:20.922883Z","last_seen":"2026-08-17T19:41:14.550286Z","times_seen":40,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":107,"send":0,"wait":109,"receive":106,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/js/common.js","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.213Z","timestamp":1786995634213,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/js/common.js HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 19 Sep 2025 21:37:28 GMT\r\nETag: \"7240c2f-87a-63f2e46bb7600\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2170\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2170,"size_decoded":2454,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f6116db6842e56a64e38bec929bc2d10","sha1":"d197b6f1446fe941e9fb5a8cb6db69f062b00cb2","sha256":"71ae5f3993d4dd12caa744a89dfcfd695fb05f828b73b5d36598334b897673e9","sha512":"774fbe993290312882623081928ac75754adce0199a503d3c34ce4e376b981657736efe1796f4903354210d07d5ead7c742912ad9cd0b12de0c029f18e85e8e3","ssdeep":"","tlshash":"2941ddcc0ea38d794962c805ea7758c1fef15d61aa25f010f55c31a5248cb66116ccae","first_seen":"2025-11-04T14:36:20.909887Z","last_seen":"2026-08-17T19:41:14.553414Z","times_seen":40,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":107,"send":0,"wait":110,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/spacer.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.220Z","timestamp":1786995634220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/spacer.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 05 Jan 2023 02:49:24 GMT\r\nETag: \"72232bc-2b-5f17b593d1500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 43\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":318,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-17T21:52:43.174915Z","times_seen":112021,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":418,"dns":0,"connect":109,"send":0,"wait":110,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/barg.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.223Z","timestamp":1786995634223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/barg.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 05 Jan 2023 03:34:20 GMT\r\nETag: \"72232aa-6ca-5f17bf9eec700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1738\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":2016,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 30","md5":"13a156ce3615ab6a1206daa3b16a69d9","sha1":"2efb6bc8681bf1d35dd317a9b47bff4c9b747885","sha256":"ba71589b6bb729587c3c110462cf7843859a61d03b0f9bb6c9724cf40cdd9f76","sha512":"e3a988ea2d7f0d9ee79b46d2d75959afe4b6cf1183e953cbf07464cd26bcb907bd8a9dd0bea77874453c3b5bd86283badee45fb5ab7780261b52ec0409da054e","ssdeep":"","tlshash":"d031f86297695edbdd1a02bc200921e70c04d52981a8b0a8a8e2bfdbca4da5013dc483","first_seen":"2023-05-10T17:31:45Z","last_seen":"2026-08-17T19:41:14.557594Z","times_seen":806,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":417,"dns":0,"connect":109,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:35.964Z","timestamp":1786995635964,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:35 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110077,"size_decoded":20175,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"bf910ef2566d22428389020c8014d928","sha1":"aa1317baf7b421eea554b1b0e73118d6366ee463","sha256":"dde7417dd8486ae876643e487d798c6dfafc409a4f80fe004c07a0c377568a00","sha512":"3a055dbe8b99573c6cff7edbdeaa5947ed05c294bdc70f998a6038299d087c4fedcd3c78640b747ba08678276307264ad79f3a6b4b24e228a061ae063f7ee633","ssdeep":"384:cz08gdkWeCYvqhFBfKjLx7NTbx7k+N9qcKCOZJbQrsZ8Dc4lVOIJ9Ns9DWZMFKP0:ck4qhFBfKHx74KuT1sHPKjtZtuaO27","tlshash":"38b37ace04d0d4f2607adc68496e058bfa2c7cf7834441758244ae9cadb2e45e7e6f7a","first_seen":"2026-08-17T19:41:14.562525Z","last_seen":"2026-08-17T19:41:14.562525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-08-17T19:40:36.042Z","timestamp":1786995636042,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/check.js?\u0026pageid=99998\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884 HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/HP?session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026org_id=2kamd3p6\u0026nonce=406c95408980b884\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: 406c95408980b884\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":229830,"size_decoded":39114,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"4926e83af43f2f400d8b55fc51b52ef2","sha1":"93e99447ad302c20568d1ade27c8f8e008602dae","sha256":"4a34784b450bf546cf0323eb81d5219031f95e68062b36c745cd5e14fbe3896b","sha512":"2b2f630805571db33ea809b2e6bcf940c58edf3aacb2161d231d323ed5c26013452dded2654e865e735ec80f4b564b6fc297aacb09729bcf8086a86580a440a5","ssdeep":"768:dUp/h31zC7tsOrHI5sCyE7EdzwPfhc9IjF0CPuShdRJY2WrJP0rap:dUpp31lUZE7Edic9I2CPuGCcap","tlshash":"8524d1f939e0c872586e2c905a0a0acfa41cd5f783499277cb146f9c74b8b60b3d5d7a","first_seen":"2026-08-17T19:41:14.564205Z","last_seen":"2026-08-17T19:41:14.564205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sec.plala.or.jp/fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr","fqdn":"sec.plala.or.jp","domain":"plala.or.jp","tld":"or.jp"},"ip":{"addr":"91.235.133.182","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884","date":"2026-08-17T19:40:36.091Z","timestamp":1786995636091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sec.plala.or.jp","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F6:39:28:4D:FF:7B:1B:BB:0E:E0:2E:C9:B0:1D:4C:86:51:C8:CD:BF","sha256":"04:6B:FF:75:2C:05:D0:56:97:56:B0:EC:8F:E5:41:BD:2C:93:B2:4E:2C:10:7B:39:12:C1:87:05:09:77:CE:14"}}},"request":{"raw":"GET /fp/es.js?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\u0026fr HTTP/1.1\r\nHost: sec.plala.or.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sec.plala.or.jp/fp/ls_fp.html;CIS3SID=72FD96EBFBA840803C0C82764F245E46?org_id=2kamd3p6\u0026session_id=8993ff28bc16c0a0ab096a7e2acb9bab\u0026nonce=406c95408980b884\r\nCookie: thx_guid=e172f7d040838c7ade1992de29f5b448\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:36 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=97\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":637,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b002395e6abf3816b9ec949e6a8f0864","sha1":"45cd1c803c7758beedeeb5c69e2eb0b8a938cf3e","sha256":"0c1c164cc26e8c3037b0ee37ce177634f1ac7effa008cf36e873e184f72e010a","sha512":"7f641b8cbed30f57c043af30f4c3350709a6ca013231edf728edeed0cb8281ea2c906920876298faa1474c75919b65bd86ccc7ce9a136d5b5fd67e4660fdebff","ssdeep":"","tlshash":"dcc02b4f0c866b4090932685b2b695a402f53c10701c01c4950724a13adc24071b0e06","first_seen":"2026-08-17T19:41:14.566555Z","last_seen":"2026-08-17T19:41:14.566555Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tactica7.com.mx/plala/jpn/webmai1/sso/pf/images/login_on.gif","fqdn":"tactica7.com.mx","domain":"tactica7.com.mx","tld":"com.mx"},"ip":{"addr":"99.198.122.22","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tactica7.com.mx/plala/jpn/webmai1/index.php","date":"2026-08-17T19:40:34.661Z","timestamp":1786995634661,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tactica7.com.mx","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 14:26:37 GMT","end":"Fri, 02 Oct 2026 14:26:36 GMT"},"fingerprint":{"sha1":"E3:8E:51:33:BC:60:2B:2D:99:2E:E0:43:85:26:60:54:19:81:CA:56","sha256":"3D:80:DC:EF:FB:99:CC:F7:C7:24:D7:DF:B3:B9:13:68:3F:0C:43:C8:57:65:41:45:30:00:E4:F4:D1:EE:93:DC"}}},"request":{"raw":"GET /plala/jpn/webmai1/sso/pf/images/login_on.gif HTTP/1.1\r\nHost: tactica7.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tactica7.com.mx/plala/jpn/webmai1/index.php\r\nCookie: PHPSESSID=215f5af70f90955ad8d0bbb2d418e279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 19:40:34 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 30 Nov 2022 05:06:46 GMT\r\nETag: \"72232bb-188-5eea912368580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 392\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":392,"size_decoded":668,"mime_type":"image/gif","magic":"GIF image data, version 89a, 112 x 24","md5":"b1c7215db449a527baa88c02d73774ce","sha1":"9592d6b8cb74f2a9bea17e188a066acc7f86b8e8","sha256":"abac16ca16c7dd5ed2d0c3c53b6ea53474224de2ebe6d546e860b73df5334f54","sha512":"bc82c10737af4534a24b8ee62a0ed4bdc8b2b330df0a31a0f634f8e6984c439c74bdcdc8d68994a80f89e585dc4f21c0e9e9c94074abb59c4f10b9049903e926","ssdeep":"","tlshash":"34e061d555fa4811f1fb02b1ab9fe52a120db22c9803e11b1d19d27b1c6101964795a6","first_seen":"2023-11-05T00:23:56Z","last_seen":"2026-08-17T19:41:14.568037Z","times_seen":626,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"tactica7.com.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}