{"report_id":"0f9b8171-4c92-4ae0-b401-624bc0cc3f22","version":6,"status":"done","tags":[],"date":"2026-04-28T16:15:29Z","url":{"schema":"https","addr":"globalsupport.com","fqdn":"globalsupport.com","domain":"globalsupport.com","tld":"com"},"ip":{"addr":"3.33.251.168","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"title":"Global Support - Back office Support, Direct Trucking \u0026 Direct Logistics, Fresh Produce Wholesale And Package Food Distribution","dom":{"size":81897,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13498)","md5":"ae0395913ae610b86668f2b791de830c","sha1":"1d83cc614b9060d07a7db2922bb2301837c81966","sha256":"27b004fe28d79ac86a651df1bcab2bc062ea7a8e6f8b9889e9a335ebb4ace027","sha512":"3b2c97845a7edfe4e6cbfe902b209825316beb94b9af329d65dbd3e480f410da8f1efe9d69a46a89243ff93e03686267b66b5c0be13120440e83a8e588b15294","ssdeep":"768:nMrsA7P4vStxf1SNZYiZh+eg+O5ceq0PR0ge6mEuQ66:MHP5vNPeg+wce55Be6v","tlshash":"ea83a79104272250c35718c271fe3e39aa0fb246a4c5982dbbfcc6a55deac71e261f9d","dom_hash":"domhashb57aa9c203122e29fc7935db52613dc4","first_seen":"2026-04-28T16:15:35.275092Z","last_seen":"2026-04-28T16:15:35.275092Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"globalsupport.com","fqdn":"globalsupport.com","domain":"globalsupport.com","tld":"com"},"ip":{"addr":"3.33.251.168","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:15:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.globalsupportcorp.com","ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-10-28","domain_rank":0,"first_seen":"2026-02-16T13:10:36.742315Z","last_seen":"2026-02-16T13:10:36.742315Z","alert_count":0,"request_count":2,"received_data":120470,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoDaddy Website Builder:7.0.5350","description":"","website":"https://www.godaddy.com/websites/website-builder","common_platform_enumeration":"","icon":"GoDaddy.svg","categories":["CMS"]}]},{"fqdn":"p3pprd001.cloudstorage.secureserver.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1998-03-30","domain_rank":777203,"first_seen":"2020-03-06T11:13:34Z","last_seen":"2026-04-25T22:47:53.940335Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":2114,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img1.wsimg.com","ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-04-26T23:26:49.005297Z","alert_count":0,"request_count":27,"received_data":1171589,"sent_data":15351,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"nebula.phx3.secureserver.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1998-03-30","domain_rank":1455082,"first_seen":"2017-01-31T11:24:03Z","last_seen":"2026-04-24T04:55:20.298674Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-04-27T07:34:41.617985Z","alert_count":0,"request_count":2,"received_data":1016,"sent_data":1149,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"nebula.wsimg.com","ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2008-03-17","domain_rank":433518,"first_seen":"2013-04-19T14:16:11Z","last_seen":"2026-04-26T20:23:37.047503Z","alert_count":0,"request_count":12,"received_data":81019,"sent_data":6348,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"globalsupport.com","ip":{"addr":"15.197.225.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-28T16:15:30.452044Z","last_seen":"2026-04-28T16:15:30.452044Z","alert_count":0,"request_count":1,"received_data":81452,"sent_data":486,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"50ca18b0fcf75e7df66c882fbdb68952","sha1":"8c220b4471b3768f9406529811e49c69836e77d1","sha256":"e7e9a5f8cb344994f40d85e2a732f89002cff39cd3297fe8805fdef445b5fc19","sha512":"0eb6a68bc27419386501b3e2440a69a6ac48ea2f96ad0fe6840b42f8f221824c6cd24b5419d9768b35468bd9d912deb1c9fabcecbf3a68c8da50ef570be2b86b","ssdeep":"","tlshash":"29e0ab9260a9971f197c34816c6031d193a8b216030140bcbf06403f64bb8947944668","size":407,"data":"","first_seen":"2025-12-12T09:45:41.495032Z","last_seen":"2026-05-10T13:46:40.953167Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ead876be5108ee194eca707e37da436","sha1":"62c3bb64a28b87901bc81ba8545e99a165c17ee1","sha256":"1e9f3b17c787a14a844bda7cc08200059972e340f9bb3cfedae94024ae4f3499","sha512":"5743cded47ac9097cddb48dbc96e2d54a2e878fb55cc78b5003d0cef710b220e4878053dcdfc848c89c2004765fe1b827c4fd840e547d4323741730b480086a2","ssdeep":"","tlshash":"4bc08cfb20aba6248bb2b4a0d08badf98a553853505859d840e10376cc3803a3c81c96","size":157,"data":"","first_seen":"2025-03-03T08:21:16.677485Z","last_seen":"2026-06-06T04:24:03.403573Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","size":104464,"data":"","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c7c8fad33907e25710074a2b073fae7","sha1":"7e7f7381675bf27fb4778a22284e41a3cf863d1b","sha256":"fb1ee13cd4d4e5f1bcce81fb8e63307eca67a054d2095ad22f2591b5f17d2a2a","sha512":"49160be9e8c774e6c0c84515f809c7be7d5ffcd20343b4e48044422b9c58e5da7f03e8b905c3dc213bd0a709a1df2078ee30aab555e7929e1bab5f458ec67757","ssdeep":"","tlshash":"7b21865a22d6db3ce30217d8e1933a30c5fd704569e41bb8a0c39fa805dc51a6113ede","size":1382,"data":"","first_seen":"2026-04-28T16:15:35.308586Z","last_seen":"2026-04-28T16:15:35.308586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd40d1ad1397a37cf2875824ba9a3838","sha1":"8fda908f5658f6b02ade81e3a35e5ea2a350c579","sha256":"ad29af61531fb70103ac75f2bb5c2f5a117004e2c4c443b27628cfe3401bc9df","sha512":"864065fd68fcb4f738dbd0b0f491d8aa7acc677cd82b5fdaf7d9630fc438dfe10b9d6e7eebf0fdda4c1e6445a54fa5770493b0860603f8807707b2da3416fd66","ssdeep":"","tlshash":"a7e0ab0ff1cc151ea0bb7437f032160811041603c1cab62d88e47039a93206f1f1685b","size":385,"data":"","first_seen":"2023-03-07T14:49:17Z","last_seen":"2026-06-06T22:50:00.775426Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6d9f0171625a0b43eb4d139431d1768","sha1":"e0c3db498d883cce0ba1eb2f29a9eaa5491f9b65","sha256":"f4ec39c207f52da1567db239b8bdd601c27a2a1e7fd04e17f9a83414866d9113","sha512":"74304cd60b35fe858c94f08875bcfc5ec47a292f5b94eb14b69e0e7964d1993e994232b7b3135e4c4aade28671d07ebb619268d480d9bae2c369ae99f6d38bfd","ssdeep":"","tlshash":"c5c04cc2545181d115b8d0a4b135a9d2a7358577038838a49640097c39b345b4748685","size":138,"data":"","first_seen":"2023-03-07T14:49:17Z","last_seen":"2026-06-06T22:50:00.777538Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/starfield/duel/v2.5.8/duel.js?appid=O3BkA5J1#TzNCa0E1SjF2Mi41Ljdwcm9k","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4286fba89cc283c837371caf8a4c01a1","sha1":"2a249707c17c54e75342bc9435a2ee4f70ffa844","sha256":"bcdb57ca019cc7e63031b471b3c0e3639d6c59a07e4334fb26b9e389e8b4fe10","sha512":"a1b4abdb569ad8e942eed143d7137db3575aac2bdbac6b079ad70d58dd5f662ae38fe9da6b4d55012e2ad05b3b86664ee18f38074d3786d892c466f833c6578d","ssdeep":"768:qqghjvuUf1Z0VNg9Kiw4RV8XW/JLkybSApjoVsxMl8vIUw:RghjZfYVUKiw4RVX/xD+VaMqvIUw","tlshash":"2203fac97b92b067a7a635f1916f000bb13a89e2f54c8870c15ce8e07c799ad417bf5e","size":41027,"data":"","first_seen":"2023-06-30T09:29:46Z","last_seen":"2026-08-09T04:25:19.236563Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:09 GMT\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:09 GMT\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-09T06:45:23.788849Z","times_seen":323529,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.phx3.secureserver.net/e8ea34d2b7b8adf83ab3325425d2fb47?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.phx3.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:10.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /e8ea34d2b7b8adf83ab3325425d2fb47?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.phx3.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":42,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:24.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 996\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":996,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"27d34eb045dd4c089f15c99602ff5cb0\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"27d34eb045dd4c089f15c99602ff5cb0\",\"host\":\"www.globalsupportcorp.com\",\"path\":\"/\",\"location\":\"https://www.globalsupportcorp.com/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"fd7aa883-300f-46fb-a796-3a0cd8d33ef5\",\"sessionId\":\"fd7aa883-300f-46fb-a796-3a0cd8d33ef5\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-04-28T16:15:09.475Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"WSBv7\"},\"customProperties\":{}},\"producerEventId\":\"af9a0bff-9d83-4c6d-9022-4e3b87b8d673\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 111262685120385102260382283462267942689\r\nx-envoy-upstream-service-time: 89\r\nx-error-info: 0\r\nx-request-id: a6b435ad-1dc1-4b41-ac72-c21dd93e723d\r\nExpires: Tue, 28 Apr 2026 16:15:25 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 28 Apr 2026 16:15:25 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-09T06:48:33.279765Z","times_seen":757605,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":28,"dns":12,"connect":1,"send":0,"wait":209,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/averiasanslibre/v20/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoI.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/averiasanslibre/v20/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoI.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 37648\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 02 Jun 2025 16:41:58 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37648,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37648, version 1.0","md5":"6614e5ae373174227bfa9a1e2d1f15f4","sha1":"26164ccfa0ec985f4814ae997fd72e425630f656","sha256":"820155e45c76e2b3a85106e91ee93825cdce220590c9718e8a32cfab62abcd4e","sha512":"a081bfd29c291bf9c9cc353a96f382e7da083b4080e24e1225859dc74bea45f95d22b7792e3d86767a2e774435ddb40479a9471cfcde7bf4129405ddc3ca7d3d","ssdeep":"768:i6nEnGSpvqLYUQJ4JaibI7IN3e7t+8wwVUP97pkb9A8JalQFQAR:i6nEnG+q8UQyUibIUNu7g8zVGpkPJz3","tlshash":"4af2f1bd910a829beb15aaf094d862b5f3c3e8bc7140b667f948f4b90801fb3574804d","first_seen":"2025-06-11T22:09:30.599484Z","last_seen":"2026-08-09T04:25:19.253658Z","times_seen":439,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":123,"dns":65,"connect":1,"send":0,"wait":44,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v27/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Suno.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/jacquesfrancoisshadow/v27/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Suno.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 41188\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Thu, 04 Sep 2025 17:05:43 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41188, version 1.0","md5":"7ae55eb7b7c92d1b0c36da96b1f81aeb","sha1":"30d90d6893975f1b0165f3141ab474a93b684b75","sha256":"4b984bc9766d6f58e7fc9a5ef81274a061c83ed647f4252fca5a9e95673045ac","sha512":"75ea4b50a63d3ef2691ec6289f576642c906f733b5bc448d1c97636d1ad338d9fa01873f64ff9c800fa1983b88a98b5e317135590e2766beca9588a7a93e344a","ssdeep":"768:+aCcFVls7uWvVOgXew6BA1+Yj7rzRTg8j9Rjg+TNjpHBtaj3j73D:9FV2hXJ+m73prj9Rc+p1LK/D","tlshash":"1c03f1f251f21029731168a86d7b437004efd7590156ecf8286b814cf8f5bfaaa782b6","first_seen":"2025-06-21T15:38:57.382584Z","last_seen":"2026-08-09T04:25:19.2814Z","times_seen":383,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/merriweather/v33/u-4D0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiScCmDxhtNOKl8yDr3icaFF31.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/merriweather/v33/u-4D0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiScCmDxhtNOKl8yDr3icaFF31.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 49168\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Fri, 29 Aug 2025 16:10:23 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49168, version 1.0","md5":"115e2bcd9aa7362316f1ad6853e3000e","sha1":"a41b46c0fe251c40b49f8c60133f0b45fc04f145","sha256":"66f5bd22d738a801a9e58d71920559743b0baaced04be299e3c4feca3dce3556","sha512":"0fc4b45e5b51b2d5a866ded0a3273db35072cd6f9831d1efadd320e1684601b1a5d01e02b127d9f898aa72101fa275b9ce56ebaa1ae2fa4491a95822db4f7e50","ssdeep":"768:aTSlQLdPSmMl28tRWYUGt4CV1iYpwKhMAULb8m523baCHFABP6:USlQLBSmG28tRDL47iThM9723uCHFP","tlshash":"c723021f3355f346f06f766859346af0d4a4e622025fd0e2f290b76aa07f4764359247","first_seen":"2025-03-06T04:08:33.479502Z","last_seen":"2026-08-09T05:45:54.818681Z","times_seen":3510,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-08-09T04:25:19.266597Z","times_seen":3614,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/specialelite/v20/XLYgIZbkc4JPUL5CVArUVL0ntnAOSA.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/specialelite/v20/XLYgIZbkc4JPUL5CVArUVL0ntnAOSA.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 53296\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 08 Sep 2025 18:01:06 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53296, version 1.0","md5":"95d46c7f34ba085b157ebb3a20ba76df","sha1":"f6a504bc195422f2b9cb305f6981d37950ae2d9d","sha256":"770493d84cbb753cd0573d0f014550583138f40469d137e310d239593a1949d8","sha512":"82dd2b08aa680606b082692aa8f74b4dde901a3a1c8b0c14e436ef933dd6892358f02c279b9e1b220a539976b0cbd5a4c5569ca2a9d63c45f0be6bab0438852a","ssdeep":"1536:AxSQvl/Zhbuz15VEkq5XBHKSsObbHl1l5LaEDQ:AIocVEnbbDl5L4","tlshash":"db330296d1987568f7f0ee3acf5c26cf8b101524bcdde6f4ccad12490198174b989cb4","first_seen":"2023-05-01T20:21:36Z","last_seen":"2026-08-09T04:25:19.308037Z","times_seen":1324,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/2d3e5d17dbe49da888482624a74c83d1?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /2d3e5d17dbe49da888482624a74c83d1?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1305\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN231CAD1EC84FAB98A5346B621139A6FA\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 2d3e5d17dbe49da888482624a74c83d1\r\nx-cloud-object-name: 3ec8941d-58e4-459c-a0f0-3e775b669c95.png\r\nx-cloud-version: 9fbd46321d648693ea6f950e157a1059\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:21:34 GMT\r\ncreated-date: Sat, 20 Dec 2014 00:54:05 GMT\r\netag: 16034aba0be6c294828bd4169dbdfb4a\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 35, 8-bit/color RGBA, non-interlaced","md5":"16034aba0be6c294828bd4169dbdfb4a","sha1":"6899e842e263acae1be4a685a327eaa33794cb2e","sha256":"7306e62bb47d8a823ea5572bc76edaa81f2b06e9439f59baec65546aaef2ce98","sha512":"a18342a8c5d7d52410c4b3a7399d22610743d7599ab59acfc143932dc7129581cb75dffb97cd18f74218b6b768669d17b89b6be37eb5c1a8cd20cafe20f8a3b5","ssdeep":"","tlshash":"f721c8dc3e192d4db92ea936269e6094976a2412276280284512f7ce126e4c5455c677","first_seen":"2026-04-28T16:15:35.281788Z","last_seen":"2026-06-03T07:39:24.625168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":78,"dns":2,"connect":4,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/amaticsc/v28/TUZyzwprpvBS1izr_vOECuSf.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/amaticsc/v28/TUZyzwprpvBS1izr_vOECuSf.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 28268\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 16 Sep 2025 03:41:09 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28268, version 1.0","md5":"984f3d0bafc2a066eeda8a0b64fe7a3c","sha1":"79b1714ae47302c451d9150f648f3a4a622b3818","sha256":"9ee1dd0b37fcea476e4142696cb034a466ad84101dff157b5dde311a02c8c35b","sha512":"7dc3f934aebbf592a622d4f4703023edeac84cd8537d1cf1a81491bd0b90dc68840bdbf77818d6572ecd2852b684a0b385d8d2b1af4131b6fa7dd5b1b7acdca1","ssdeep":"768:2H3nFpTKN49ezUbrCvIMn6ZM5dcFq7p+q6XkCOqNmbPB:SHOwe4nCv2abcEp+q6Xk7qIb5","tlshash":"86c2e12673ad5fadc495b0bd68f03dd92d040e17344b432d7afaaa8e818d0846dceec0","first_seen":"2023-08-30T06:04:37Z","last_seen":"2026-08-09T04:25:19.276645Z","times_seen":1183,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":95,"dns":60,"connect":1,"send":0,"wait":7,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-08-09T05:50:29.678188Z","times_seen":44628,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/seaweedscript/v17/bx6cNx6Tne2pxOATYE8C_Rsoe3WO8qY.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/seaweedscript/v17/bx6cNx6Tne2pxOATYE8C_Rsoe3WO8qY.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 43616\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:44:39 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43616, version 1.0","md5":"e3b6482aed8fdbba4bf4c52da4d55e26","sha1":"bcd835e68528809ea074c96ebac5bed78783b01e","sha256":"81ca80049b8c8109e4ac16d78a3c77ca18e37119265b9bdaf96c78c1c6896a95","sha512":"9dca7b12b3bb82c2e5705631da2ec97b14c0311cd808491cd71d6d781ae7aafb43734d3030d6238e1478251b9ec0fc1b6b2dd161973649fa9dd9f81e4665d138","ssdeep":"768:d3yN+SAPpmrXTjTZLGFDtEvSDqC/UDfjPqGyAq0suLVhUGqVssAYaep0vH:dvP+/TZLGYvSuC/YPqG3q0su5WGQDAYg","tlshash":"b013f16c19d26d64169b33d9c4bab242edd9b53fc0c4a80a0e7e5bc2ed9969008d7213","first_seen":"2023-05-05T16:36:46Z","last_seen":"2026-08-09T04:25:19.213273Z","times_seen":495,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/24c68b055c9a59e95798387e31feccfc?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /24c68b055c9a59e95798387e31feccfc?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1702\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDNFF53D3EE083C359AFDBAF80640C90987\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 24c68b055c9a59e95798387e31feccfc\r\nx-cloud-object-name: resources/2a3ac235-eaed-4703-98c2-4dcff33de563-cropped-soc2.png\r\nx-cloud-version: 2f3dc44611a21d0e39f84d3fe7bdca81\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:09 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:10 GMT\r\netag: d8fd1f1abe5a94a14acbcfb106dac05d\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"d8fd1f1abe5a94a14acbcfb106dac05d","sha1":"a2e201da9baddad47e281dc937c1e03ff8d2e91e","sha256":"aeafe3d98cfbf62e0a2a067f2f8ae5c80e160f0d3421058f6458fb319cf6cc68","sha512":"ece06fcd3d0283bf50522a98674241c837abe18e34eef0caaefe061c22912a72759cbe3414b899b58009220817284ef3892ee433550b639395152e92d6ee44d7","ssdeep":"","tlshash":"80313ac5dc0f29a35286068cc5b5c295fc3be42461362a7a275f312b12d0ece9954a8a","first_seen":"2026-04-28T16:15:35.284521Z","last_seen":"2026-04-28T16:15:35.284521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/c4d017f634048f31af3b523c860413b6?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /c4d017f634048f31af3b523c860413b6?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 9684\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDNDD9C1F1EB07BC2B7833C17A3FB971892\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: c4d017f634048f31af3b523c860413b6\r\nx-cloud-object-name: a4f5146e-8fcc-47bb-a902-3693a8fd68a3.jpg\r\nx-cloud-version: 4fe5403a90620b584f46806794075ede\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:21:52 GMT\r\ncreated-date: Sat, 20 Dec 2014 00:31:45 GMT\r\netag: aebcf82d2b543e999e3f47ba329f6284\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, manufacturer=Canon, model=Canon EOS 400D DIGITAL, orientation=upper-left, xresolution=212, yresolution=220, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2007:12:24 15:57:29], baseline, precision 8, 100x100, components 3","md5":"aebcf82d2b543e999e3f47ba329f6284","sha1":"b61ee54da350f5d974e1b341df103792348b0a75","sha256":"344b1ab91037f37f69b78deb68a785e1c6c5240704c7c0be35f649b24b4482c5","sha512":"dc4984f80d76bb57c9f3dbc9f65e5f5bbd0c825ffbd4ef20ac0ae0ef57dc6605edb5fef96b52ee0ff5d8e79cc77db4b0b51b577b8346b2607ab8fef9b8edecfa","ssdeep":"192:t3vP/Nj2GL58a4tdA9p6Ws4h8mT9GH1uLDizJntAYTGBZ+:fiGL5l4tdOp6WshmTg1uLWzJ6Yym","tlshash":"3a12aeb5a3666fb2ffd742be4069d762f23ae8403307413a184520c9ff81bc14d99ba0","first_seen":"2026-04-28T16:15:35.285441Z","last_seen":"2026-04-28T16:15:35.285441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/fadbf7eb092571654a4c7ecbca8e7087?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /fadbf7eb092571654a4c7ecbca8e7087?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2732\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN9D540E2254CA4E5EC2A2F12BA8AE83A1\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: fadbf7eb092571654a4c7ecbca8e7087\r\nx-cloud-object-name: resources/67f81053-879a-48c9-a579-da6464e9fbaa-cropped-blurbs.png\r\nx-cloud-version: aa6b73ddca2806848050b5722f4489dc\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:12 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:10 GMT\r\netag: 6699859e68e94290bddb06045b9c8b16\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"6699859e68e94290bddb06045b9c8b16","sha1":"fd9be037cbd54222adb85068f42a00837aface7b","sha256":"8eca91daa52c571c863c98de02366f6a439752c8a9acda140caf30f458ec1e96","sha512":"7acad65bec981a347c38c6a793d485b02b55f5e03183ce0b685f1bddce6b2dd5c708e89c4664a87bd0ad9952dbaf587f9c83a3c22e6867f2da6caf359aaaaf41","ssdeep":"","tlshash":"58512b72dff81bc395e53d7b7561c603afe15a41e128c86c1d124cf91a53ca4998b253","first_seen":"2026-04-28T16:15:35.286348Z","last_seen":"2026-06-04T04:48:51.84041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":67,"dns":2,"connect":4,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/c52b677ea460d36fddce4cc18bad5976?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /c52b677ea460d36fddce4cc18bad5976?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2360\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN2FCDA6DD1E85352D2C548D819B0710EF\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: c52b677ea460d36fddce4cc18bad5976\r\nx-cloud-object-name: resources/4ba0dd2c-7534-42bd-a92e-17b7a8b62258-cropped-null\r\nx-cloud-version: ae0e592b07a54c3fe2f2f17e1c95f1e7\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:10 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:10 GMT\r\netag: 452db802cb563fec1b80fd5552193b40\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"452db802cb563fec1b80fd5552193b40","sha1":"ff303a8f813b8d67b5eacf43ed66563d6428f29e","sha256":"b89158a3ea21997d5b2d3a83350513df60238bd833c4d216109e22fc3fefeb43","sha512":"d1d88b6545ae6df161c7f3ce65bfe88fcdcf8aa1e954a78b668e921e7c5462a7f1ede813880e3ff064f6e2c9fbea7a5ff0c6563d98b9717a4e3ea2167f6fc0de","ssdeep":"","tlshash":"e0414df5712227b0c1966a23d0015aeb1eefcd17cb4458876641f9dc7d5029ca6f476c","first_seen":"2026-04-28T16:15:35.287282Z","last_seen":"2026-06-04T04:48:51.8324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: sZHtSt/BAcaTNUdoxqmqc/sqQ4Q9S534Aven84WQkdXv1JYienXoeInBXkfA1kgn9Ov1XGgZSms=\r\nx-amz-request-id: P8Z2VKH8KJY1TRQV\r\nlast-modified: Thu, 19 Feb 2026 18:11:28 GMT\r\netag: \"6b309239dc60d45e344f4d49a2c5f041\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.0\r\nx-amz-version-id: 5rz5mfani0A4Sx2XrwmZgSvEFZ7uFBOZ\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Tue, 28 Apr 2026 16:45:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ncontent-length: 21133\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":19,"connect":14,"send":0,"wait":7,"receive":6,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalsupport.com/","fqdn":"globalsupport.com","domain":"globalsupport.com","tld":"com"},"ip":{"addr":"15.197.225.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:15:08.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalsupport.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sun, 17 Aug 2025 14:29:15 GMT","end":"Mon, 17 Aug 2026 14:29:15 GMT"},"fingerprint":{"sha1":"3A:86:97:6D:6A:75:38:ED:49:3F:4E:21:82:B6:0E:BD:0A:F4:00:87","sha256":"C6:56:40:3F:65:AD:22:6E:42:DF:34:72:F0:95:71:5D:FF:E3:97:4F:8D:29:66:49:EF:6A:83:AA:5A:6F:F5:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\nlocation: http://www.globalsupportcorp.com\r\nserver: ip-100-74-4-205.eu-west-2.compute.internal\r\nvary: Accept-Encoding\r\nx-request-id: 8401346e-36bb-40cb-9272-3d010c4bb0a7\r\ncontent-length: 67\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":81132,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":186,"dns":49,"connect":1,"send":0,"wait":33,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/site.css?v=","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalsupportcorp.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 06 Jan 2026 15:16:41 GMT","end":"Sun, 07 Feb 2027 15:16:41 GMT"},"fingerprint":{"sha1":"3A:FC:3C:DF:74:2A:34:47:62:F2:CA:6C:AA:D3:1A:72:D3:50:32:5C","sha256":"4C:95:BD:FC:1A:B9:3C:73:B3:3B:7F:C2:61:AE:87:9C:31:40:9D:2D:8F:89:4C:CA:2E:61:DC:3F:7B:4D:FF:D8"}}},"request":{"raw":"GET /site.css?v= HTTP/1.1\r\nHost: www.globalsupportcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nCookie: dps_site_id=eu-central-1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLink: \u003chttps://www.globalsupportcorp.com/site.css?v=\u003e; rel=preload; as=style,\u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin,\u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin,\u003chttps://img1.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://img2.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://img4.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://nebula.wsimg.com\u003e; rel=preconnect; crossorigin\r\nCache-Control: public, max-age=60, s-maxage=300\r\nContent-Security-Policy: frame-ancestors 'self' websitebuilder.godaddy.com websitebuilder.secureserver.net\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Type: text/css\r\nETag: 17d65792fc9625a5fb890fe1a51b05db\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nServer: DPS/2.0.0+sha-8929d67\r\nX-Version: 8929d67\r\nX-SiteId: eu-central-1\r\nDate: Tue, 28 Apr 2026 16:15:08 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34453,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (34447), with no line terminators","md5":"316fe1d99d203e8d84b836b4fa1281d9","sha1":"ab00dd24ab19523c63c5c64733474df29f1b233b","sha256":"6adc3b22f89841be7c216003174bcf964eb34e9442cc866471b1d1ce948051b2","sha512":"b479663589b4f9db0a59012d67d0e05a23675103575dfd430b2967d30fc9a1611f1cd076745baa91c5d235beccc176edb3b9209cb118006c33b45ba5ddeffd40","ssdeep":"384:9CYuNHXtVmLVwGaaOzskubr0/kllDBCY+A/r/NHXtVmLVqGaaOzskudJm/kijT0z:8djoDMY+A/rFdl7jTDkhn","tlshash":"b3f29532e4c0316ab527c536f59877e9612c9113d66346befed3bca5ca8b4950322f2c","first_seen":"2026-04-28T16:15:35.288841Z","last_seen":"2026-04-28T16:15:35.288841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/allura/v23/9oRPNYsQpS4zjuA_iwgW.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/allura/v23/9oRPNYsQpS4zjuA_iwgW.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 26488\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 27 Aug 2025 19:22:06 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26488, version 1.0","md5":"9ff52664b6eb2411e607eb484a47ffe5","sha1":"8145c61198a3be99f45fdc607dc36a8150730bc5","sha256":"203583457d9c8cc90309f580dbf27a5fa9ed2893f06b8404ebb4c05e909c18e5","sha512":"6914883187059119cb8680d1268ef22c18024e16fcd4c7ecb167f1189354962ef609b726db58d0f400b5e9cf6635b89811e4578f20f66ba5f2f533275ebe27eb","ssdeep":"768:pDc7CupinofN4Cx3AcoiAeEt2PBsK0OyuvgbIW:Jc77q0N4zcHSt2PBsK0O/vhW","tlshash":"a2c2f229d326ae49f83181fb1f2469def639e7670cb0161e9935429853bb3ea4c9007c","first_seen":"2025-06-14T15:41:13.092744Z","last_seen":"2026-08-09T04:25:19.265729Z","times_seen":927,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":130,"dns":59,"connect":0,"send":0,"wait":45,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/overtherainbow/v23/11haGoXG1k_HKhMLUWz7Mc7vvW5ulvSs9Q.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/overtherainbow/v23/11haGoXG1k_HKhMLUWz7Mc7vvW5ulvSs9Q.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 18912\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 27 Aug 2025 19:19:01 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18912, version 1.0","md5":"e8a88f32afa0cc1f42e2a6ac2484cd57","sha1":"06ed1149feefd98bf50b160974c3966df7574573","sha256":"37896f0dcf287c5856e85b66ef3a8d918f0c332dd8a11d4cd8d7fa343dc64005","sha512":"473bd1e180d6b3ea25b85c9b8a8eed08321739e42e62e5e1e82a37f0e6db7e79726527805849a2e988f6284cbd4b6bc391d8e0d5229da2e20f1c1575196caed0","ssdeep":"384:8KEcemrMZnEopKg5S3u+jiaYFRfktEO4rypVrrqMcaoaOUsqHdKDkr+Fn19v/4fN:8KEctrynEXkSvjiaOGtEO4ry1rZorif3","tlshash":"5182f1c5696f23e4bab38b31918abb095eddf9e68307d051f03699d7cd8090e0918cdd","first_seen":"2023-05-14T09:53:42Z","last_seen":"2026-08-09T04:25:19.30719Z","times_seen":429,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-08-09T05:27:45.951944Z","times_seen":13301,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/4ac62e14d6729e84f11ef34dd5344de9?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /4ac62e14d6729e84f11ef34dd5344de9?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1744\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN669B3D5FC3A86FE9DFF00A531ADF055A\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 4ac62e14d6729e84f11ef34dd5344de9\r\nx-cloud-object-name: resources/9d922620-cfde-4928-b649-06eb076d4aa9-cropped-soc3.png\r\nx-cloud-version: ce3067be2e1532cb93e7b40b3afea4f6\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:14 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:09 GMT\r\netag: 2b047a81c9aed9c0fd18d335f60c71b8\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"2b047a81c9aed9c0fd18d335f60c71b8","sha1":"154cb5c3ce286d351de8f4834841a1018e655102","sha256":"0edef08e5795c697da7954163a646401ce89623cd6e20532efebfe7a2f38243c","sha512":"a74dfecea16dd9f65a89826363fbc332fa2f2e2ee46d449cc86971042f7478ff065014ddc43de0f4ab522d00b19bafaba958a70f2d904c1040312f9a251bab1b","ssdeep":"","tlshash":"c23148afa4005f2af22a317d84078744ad16cbca02824e4274ee51aec994a28512bbce","first_seen":"2026-04-28T16:15:35.291997Z","last_seen":"2026-04-28T16:15:35.291997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":549,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/a3242d2a1f8a6515598342ed52c174bd?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /a3242d2a1f8a6515598342ed52c174bd?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2636\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDND8A9415D019776191D7E51C544DA0882\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: a3242d2a1f8a6515598342ed52c174bd\r\nx-cloud-object-name: resources/e582f984-276e-418a-a19f-a4202c47ab2a-cropped-people.png\r\nx-cloud-version: 7d921ee6764674eeb50990cbda6ebd12\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:14 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:09 GMT\r\netag: e8970edf76c0ab1effa183e697630fbc\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"e8970edf76c0ab1effa183e697630fbc","sha1":"c00c35daa89715aa0255d0fa94a113aa48689e32","sha256":"c0d018e9f289e50f6ef8d2bc522f552d34c8701281499506e5d70e99f806947b","sha512":"8933dfd39a8e6a565c771b396f2fbe8c77b6bd61323ecc3c415cfb330412591216cbf06c465b0359ae47cdc83648b8f87458d412629d5d65494846146822654f","ssdeep":"","tlshash":"83513b4ecbb5e95ecd3930f0057ce209acc19d8984e25bfb4e12cc21a5a63ee5461902","first_seen":"2026-04-28T16:15:35.292847Z","last_seen":"2026-06-04T04:48:51.838717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":69,"dns":2,"connect":4,"send":0,"wait":657,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3pprd001.cloudstorage.secureserver.net/wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/designer/iebackground/iebackground.js","fqdn":"p3pprd001.cloudstorage.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.645Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/designer/iebackground/iebackground.js HTTP/1.1\r\nHost: p3pprd001.cloudstorage.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":7059,"timings":{"blocked":7059,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sacramento/v17/buEzpo6gcdjy0EiZMBUG4C0f_Q.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sacramento/v17/buEzpo6gcdjy0EiZMBUG4C0f_Q.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 23708\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:46:02 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23708, version 1.0","md5":"526cc0748a391a40caa821f828acdcb0","sha1":"f3a4feddf0949dfc1e81c81a701603451e4d4951","sha256":"2fcd867d2812578d001b0eca921848e24de91d01986f26e038be374ec7c5cfd2","sha512":"1cb49811942bf9cc705e88ae1a250639ca752b39f7078106ab9f8af686eb5cf98c5daf1992384c1f8180480963356bed64f02f0884d1c2b338890fc425b5dbe0","ssdeep":"384:x1P2/Tm6/to4tGi1EYwhRbKaM3Iv0dedw1Ry++PUQV/E+TKcQ9LaOdfx72b52uSB:+z1o4QiymPdedwP+PUQV/Es5Odfxg2u0","tlshash":"09b2e13e64b8ee94f7952668317d0059763340c89bcd268f8760bc66fbacbb72c0d506","first_seen":"2023-04-10T08:32:26Z","last_seen":"2026-08-09T04:25:19.282194Z","times_seen":1780,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/12c686b93df2f4c1116f6b38d3966057?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /12c686b93df2f4c1116f6b38d3966057?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1362\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDNEC0B2D0099D2C94D2C449728AAB521E8\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 12c686b93df2f4c1116f6b38d3966057\r\nx-cloud-object-name: resources/0ff19708-e497-44ee-a5b0-5043019b687e-cropped-soc1.png\r\nx-cloud-version: 7e8bb87ba7d672782aba7d38ad6b88d8\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:09 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:10 GMT\r\netag: 0ae19a0b90d991ecf49f085b581de276\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"0ae19a0b90d991ecf49f085b581de276","sha1":"7094c5201f6138a97c73bebf8f64ac8036ed17e7","sha256":"30cb889b148afd96d06868dba6ea0fca5f139ef7eec6724938c9aee2a6108c41","sha512":"ef5915e7464bb66a0ab13fd04f7d00efa531c436b5e5f818d76fe5b954372eb567822b638eb3ec33b30b7bbcaa389562430fe93e1315734cf573643c6b01273a","ssdeep":"","tlshash":"752108a1b100843defa40f56d0ce60128b22d757870209fa6972e81a22b0b31edb97db","first_seen":"2026-04-28T16:15:35.294296Z","last_seen":"2026-04-28T16:15:35.294296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":80,"dns":2,"connect":3,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3pprd001.cloudstorage.secureserver.net/wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/libs/jquery/jq.js","fqdn":"p3pprd001.cloudstorage.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.640Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/libs/jquery/jq.js HTTP/1.1\r\nHost: p3pprd001.cloudstorage.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":7064,"timings":{"blocked":7063,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/arizonia/v23/neIIzCemt4A5qa7mv5WBFqw.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/arizonia/v23/neIIzCemt4A5qa7mv5WBFqw.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 32992\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 17:07:53 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32992, version 1.0","md5":"16d332d163508435da949d3bb32b9883","sha1":"bbd74615562ff093375ff0cca1bbbec39eb964ad","sha256":"5092459e6ce7b1edd16243cebd1086dbd81c678dacce48d289ed8b891993252e","sha512":"b6772b26a7ab654f02aa1d0ad11b19457d006d025e978ecda29837c94f849a79cb256c2565fad31fd00bb9aa6d13ff9680acb4d7c48209ec0d469707f15e587c","ssdeep":"768:tCfGBTkFXgJvXiXpHk+eh2s55dJgsTIt+UHreJ9FuenDelqBN:tCQTk+JMNkv8gpxTSPHre3umDJ","tlshash":"51e2f1b481d1f5e8d001d0784c73babb0790173daaef1f6ac9962164fdd60bc246f686","first_seen":"2025-09-16T03:34:37.394029Z","last_seen":"2026-08-09T04:25:19.305311Z","times_seen":544,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":122,"dns":65,"connect":1,"send":0,"wait":42,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/frederickathegreat/v23/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--Sjxbc.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/frederickathegreat/v23/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--Sjxbc.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 203144\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 16 Sep 2025 13:26:22 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":203144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 203144, version 1.0","md5":"2e423ceed8ba7a985ce9d2a30885ca77","sha1":"b63c7a759b247e1606d303c42a363fc7cff9656b","sha256":"1375ac69dc481d77cd150b7c72029c4e6383c5bd9751ca5b55993b0cccae2eb4","sha512":"8a2a3fa5110cc6cdc594bf0d11345ff119d35d09b67b6d0d4cebec997dc088ba30a22296ebd5f7bb2cc3e84e424d566d63316053e1e034e1536f21df00af5402","ssdeep":"6144:SotmJUUw96hvAAghYWyN6Zoo+mbFyLyUHKF15Zki22m:x+UP92AAgaWjZ9+mEyomkiLm","tlshash":"f91413e2e3525c8878d7a108febfede21c16359f77015153c2850a805eec9653afae39","first_seen":"2023-04-12T05:54:41Z","last_seen":"2026-08-09T04:25:19.199759Z","times_seen":697,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/josefinslab/v29/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Kg.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/josefinslab/v29/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Kg.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 11828\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 15 Sep 2025 17:10:40 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11828, version 1.0","md5":"e703eb2b7c0eaf208f822050572e0f0b","sha1":"583faf104917acea1d737e9a2c3c8e934da5a2d1","sha256":"248a603b50674b82c502a9b0236bbc4dd7895f6120539c555d3e57d14a66b2cd","sha512":"4061cc09c4f6fc38c8d78663245ec48d07c1b3767d788d10cdc1b289fd164ea16dd401b5b396dc16068dc6ea3b1c4973ab6bd4c281a512219c041b44241f1065","ssdeep":"192:zJ3LT1IfIEN/erhO1W1O08T2iIOT+egFzY5/atw3cybwVg2fjY3HhOYFbfJMEDMa:tbT1lE4rKuO7T2BpYNatwMUwBLYXhOYv","tlshash":"7132cf9c08ff2b80e23321677c7768c4ff5d883a5559a0b7e5d623a2bd19c273072604","first_seen":"2024-12-11T21:38:42.117689Z","last_seen":"2026-08-09T04:25:19.24543Z","times_seen":567,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/offside/v26/HI_KiYMWKa9QrAykc5boRw.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/offside/v26/HI_KiYMWKa9QrAykc5boRw.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 17232\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Thu, 04 Sep 2025 17:04:47 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17232,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17232, version 1.0","md5":"141f35537400d265252a61f7be2adead","sha1":"53b4838a05eec25a79ee92f684a551dd4db815c8","sha256":"d65671ab1bdf31f444a1893e912fb5dd6da6f6de7cd1240028d1fa8a4a17f2da","sha512":"013e84549c5ab659edbc07e59ee60e45e48fd45afcce005794257a89b176c7fa0e7cc79de16c0e3396bd289551bcbdb6d52bced097a54fdb2f61bd21329d17ae","ssdeep":"384:WQ4ZeC1VCl2TybqoXcksiX9z3SrHIOMw9vGQe6sSsRBjCAc0p:Ieau+oXcksitbfyhibcW","tlshash":"a872d1f1d9ea7592ce78683f365021e04f3798cd0e3bca1fc57e602a6383d66194127a","first_seen":"2025-09-25T13:58:43.123608Z","last_seen":"2026-08-09T04:25:19.246083Z","times_seen":378,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-09T06:45:23.788849Z","times_seen":323529,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/dd44221801fc2bb35f67e8c6053d077f?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /dd44221801fc2bb35f67e8c6053d077f?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 19804\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN5CF03AA11B870F3DC6C01FFE79FC973C\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: dd44221801fc2bb35f67e8c6053d077f\r\nx-cloud-object-name: 89515a40-56d4-46ae-86db-f72555e04009.jpg\r\nx-cloud-version: 17db351b48401573d65d1928eed7b408\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:21:48 GMT\r\ncreated-date: Sat, 20 Dec 2014 00:32:32 GMT\r\netag: b9beb68a11b4a033ce74b508dac6bb36\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x135, components 3","md5":"b9beb68a11b4a033ce74b508dac6bb36","sha1":"284db591ca4dd76829da8805a02653a5f5c34e65","sha256":"6ac61588b876f0ddb93f535f34b1d389448a815d62cbbffb6a137259dcfbb07e","sha512":"8bd3583962f2ae07ea2db1eb59e256428188cfe4117414ad91257ddd20ddb0c68a0d0b707f255b105386ae7008b9716edbcb30a58591082815f85b9cbc0c4cd2","ssdeep":"384:W21pPWi2/d7ZoC28tRGImDeRHxd/GqKnokSL81AEqvQD4vo6X/q:WEOi07ZoMtjRRoqKoT8AEeK6X/q","tlshash":"9d92e084233aa7685d6ebbfb304173f1696dbfd5fc1cf04a4a00f4e1154aa56ed0923a","first_seen":"2026-04-28T16:15:35.297582Z","last_seen":"2026-04-28T16:15:35.297582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":767,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3pprd001.cloudstorage.secureserver.net/wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/designer/app/builder/ui/controls/media/gallery/media.gallery.js","fqdn":"p3pprd001.cloudstorage.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.641Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/designer/app/builder/ui/controls/media/gallery/media.gallery.js HTTP/1.1\r\nHost: p3pprd001.cloudstorage.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":7063,"timings":{"blocked":7062,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3pprd001.cloudstorage.secureserver.net/wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/common/cookiemanager/cookiemanager.js","fqdn":"p3pprd001.cloudstorage.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:09.643Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wsbv7-assets/WSB7_J_20250303_2130_DEP-03042_5487/v2/common/cookiemanager/cookiemanager.js HTTP/1.1\r\nHost: p3pprd001.cloudstorage.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":7060,"timings":{"blocked":7060,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/cabinsketch/v23/QGYpz_kZZAGCONcK2A4bGOj8mNhN.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/cabinsketch/v23/QGYpz_kZZAGCONcK2A4bGOj8mNhN.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 78908\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Sep 2025 18:40:16 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78908, version 1.0","md5":"949d7a4e6c90cf7dbccf4af592d7dde5","sha1":"7f4ce146bb26d50a437be7379cf68fbdc528ab70","sha256":"2567d1d7790f635a8e4a705500bbf702f1220f5a14252a94e8bf2350fcc1ab2d","sha512":"8a62ecf9a6efd12e9051a3ca77c56a6f134cbce446469304a7892ee407369b8726c650f9bda63ad39a966a6ff7fc864d7bd21a4d348fd2ca21655a926543da9c","ssdeep":"1536:4jSEC63bGI2tsiVJfgbh76bxVA2apqlsG10KC/ECZPfSyd1X0szbAF:4jLrCzfgbwbVkqyGq98CZHSyzk4bK","tlshash":"7f730284c5f86f12da7104b6200cdeb92a87d1e7f4b6fc28866343d9e7c5de2ab0c564","first_seen":"2023-05-10T15:24:16Z","last_seen":"2026-08-09T04:25:19.244612Z","times_seen":617,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":121,"dns":58,"connect":10,"send":0,"wait":47,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/francoisone/v22/_Xmr-H4zszafZw3A-KPSZut9wQiR.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/francoisone/v22/_Xmr-H4zszafZw3A-KPSZut9wQiR.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 18076\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 16 Sep 2025 03:39:48 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18076, version 1.0","md5":"959673f5db186e351f06449b0ebf4f8e","sha1":"dc5bc9790937d74f0b338b63a762a9f9e48abfcc","sha256":"de26d234715c14881d76e5daef46c774572c031f15157b33f361799a41f18ee8","sha512":"bf6203dedc61b1b10fd1d1ffe35e34a0a094f2918b3dc5f0921ef7e55efeea0c2da4d25346f887aa35ddf61551376b7859239370f2363222ee925d79762c2c13","ssdeep":"384:eTYVFVOrY+eJ17FTY/P5k4N2YszBq/uPAtSy2xUCgI7:eE5EStFDNYuSuYtSywUCgC","tlshash":"0782e184af08a4a7788b52ee704c9cca4e7771190b4f8c4b65d07f4a30cd1892b6ed5a","first_seen":"2025-09-17T05:11:52.825655Z","last_seen":"2026-08-09T04:25:19.2806Z","times_seen":809,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":120,"dns":59,"connect":10,"send":0,"wait":49,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/loveyalikeasister/v23/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9Xxd.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/loveyalikeasister/v23/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9Xxd.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 68544\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Thu, 04 Sep 2025 18:34:47 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 68544, version 1.0","md5":"8a977dc444271077847099edbcf52d05","sha1":"700b93c16bec56d4d6f0a1d503becb97e611e02a","sha256":"3ea338892cc378d6199336c5b4d4d765198e6fc383aa945fb580f86afb66cb07","sha512":"5f51f59a802b93372ad9145246cd0192054f29489788118c3170a9e5ace2c19c783fd568508679b7f37790a37ea94d4e372ca800ab29751f303d3765479a7f53","ssdeep":"1536:JM7NbXliGU7+Nk6JFgOdo6KmJ5S7Aig/fc9kIEahQuMHLhExbEeU:JM7NbVnbJF3okJ5SUig/URlq3rKFEeU","tlshash":"31630149b0e84dcba73a167862fc5a1dcabfbdd21c0bc58f70f2584a53146ae44489df","first_seen":"2023-09-08T05:52:43Z","last_seen":"2026-08-09T04:25:19.286875Z","times_seen":546,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/romanesco/v22/w8gYH2ozQOY7_r_J7mSX23YK.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/romanesco/v22/w8gYH2ozQOY7_r_J7mSX23YK.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 17604\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 15 Sep 2025 16:35:04 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17604, version 1.0","md5":"57406848808cc3a15ee8d063071262e8","sha1":"81ae29e98f956b7cb227ccc7dde966a12a88c8ef","sha256":"e880795c3ddf5bfeab93ad906860203daa0a6af5ce2a9e3f6ece406a52ee3d92","sha512":"ff0a22dcfc34fe8c3d5d7dc1e2e012199352d861814a2d2b1534c72ba4be3980c140f52b5fdc11d5b216d43e078af986e7f88e32e4c96b3132dc664953f41ab2","ssdeep":"384:k9FvHhureLpEw0zEeiiR48IgU8z8Z5SyfyCfUWjbkjDrZAd+:05Ere1ELEeiiRVUpZ5uvW30ZAI","tlshash":"0182d0bca43213e39364632760697aa7265e2ab3a040f45a7d538f8debe074384209b4","first_seen":"2023-05-04T12:38:14Z","last_seen":"2026-08-09T04:25:19.191639Z","times_seen":411,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-03T22:48:02.319545Z","times_seen":7902,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/e262f1717e9d62f4e56deae18344b440?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /e262f1717e9d62f4e56deae18344b440?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 716\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN190C0AB67C9BA6E604A9B8DB50BFC654\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: e262f1717e9d62f4e56deae18344b440\r\nx-cloud-object-name: bf19e6be-7d49-41a2-b62f-ef83f8d1ed12.png\r\nx-cloud-version: 5916da5efcfc7d41c80362c35fd206d3\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:21:57 GMT\r\ncreated-date: Sat, 20 Dec 2014 01:26:55 GMT\r\netag: f6c1bfe35d12e7172ba0be10895e666a\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 45, 8-bit/color RGBA, non-interlaced","md5":"f6c1bfe35d12e7172ba0be10895e666a","sha1":"8fb8547176b5265e7c37b937d780fa2c38ca23a4","sha256":"979b043186660e77a09321bc2679f8498aa82ad2fd255412b270a5e9a575e34c","sha512":"b9009c7eac23311ac9a0b2cc431b86463ed570e42d2e3624687b8f834d5d6d85dab0266af398007493a1a37a1397372d430521b42bf9c5c31edbffb88d6d43a5","ssdeep":"","tlshash":"1c0194c0786bd07c9d113012056260065a5bae038322d4a4bd0dd804d9b278f41efb22","first_seen":"2026-04-28T16:15:35.300665Z","last_seen":"2026-04-28T16:15:35.300665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":79,"dns":2,"connect":4,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.globalsupportcorp.com/","fqdn":"www.globalsupportcorp.com","domain":"globalsupportcorp.com","tld":"com"},"ip":{"addr":"13.248.243.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:15:08.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalsupportcorp.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 06 Jan 2026 15:16:41 GMT","end":"Sun, 07 Feb 2027 15:16:41 GMT"},"fingerprint":{"sha1":"3A:FC:3C:DF:74:2A:34:47:62:F2:CA:6C:AA:D3:1A:72:D3:50:32:5C","sha256":"4C:95:BD:FC:1A:B9:3C:73:B3:3B:7F:C2:61:AE:87:9C:31:40:9D:2D:8F:89:4C:CA:2E:61:DC:3F:7B:4D:FF:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.globalsupportcorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLink: \u003chttps://www.globalsupportcorp.com/site.css?v=\u003e; rel=preload; as=style,\u003chttps://img1.wsimg.com/gfonts/s/allura/v23/9oRPNYsQpS4zjuA_iwgW.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/amaticsc/v28/TUZyzwprpvBS1izr_vOECuSf.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/arizonia/v23/neIIzCemt4A5qa7mv5WBFqw.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/averiasanslibre/v20/ga6XaxZG_G5OvCf_rt7FH3B6BHLMEdVOEoI.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/cabinsketch/v23/QGYpz_kZZAGCONcK2A4bGOj8mNhN.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/francoisone/v22/_Xmr-H4zszafZw3A-KPSZut9wQiR.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/frederickathegreat/v23/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--Sjxbc.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/jacquesfrancoisshadow/v27/KR1FBtOz8PKTMk-kqdkLVrvR0ECFrB6Pin-2_p8Suno.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/josefinslab/v29/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Kg.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/kaushanscript/v19/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/loveyalikeasister/v23/R70EjzUBlOqPeouhFDfR80-0FhOqJubN-BeL9Xxd.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/merriweather/v33/u-4D0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiScCmDxhtNOKl8yDr3icaFF31.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/offside/v26/HI_KiYMWKa9QrAykc5boRw.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/overtherainbow/v23/11haGoXG1k_HKhMLUWz7Mc7vvW5ulvSs9Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/romanesco/v22/w8gYH2ozQOY7_r_J7mSX23YK.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sacramento/v17/buEzpo6gcdjy0EiZMBUG4C0f_Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/seaweedscript/v17/bx6cNx6Tne2pxOATYE8C_Rsoe3WO8qY.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/specialelite/v20/XLYgIZbkc4JPUL5CVArUVL0ntnAOSA.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin,\u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin,\u003chttps://img1.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://img2.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://img4.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://nebula.wsimg.com\u003e; rel=preconnect; crossorigin\r\nCache-Control: public, max-age=60, s-maxage=300\r\nContent-Security-Policy: frame-ancestors 'self' websitebuilder.godaddy.com websitebuilder.secureserver.net\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Type: text/html; charset=utf-8\r\nSet-Cookie: dps_site_id=eu-central-1; path=/; secure\r\nETag: 6b51be20cae9b5bdc85fcfa90ffc0087\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nServer: DPS/2.0.0+sha-8929d67\r\nX-Version: 8929d67\r\nX-SiteId: eu-central-1\r\nDate: Tue, 28 Apr 2026 16:15:08 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoDaddy Website Builder:7.0.5350","description":"","website":"https://www.godaddy.com/websites/website-builder","common_platform_enumeration":"","icon":"GoDaddy.svg","categories":["CMS"]}],"data":{"size":81132,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14259)","md5":"7a30961af2216b4ed27dfb19d62d619f","sha1":"d30beb8cece41263ff8b037f3fd60039ff84fd07","sha256":"3f412eb4ce2b98ef8b2c6e5809efcbc8bbf57ab804908c2ec2ae00409dd731f1","sha512":"973b22c5c0ba1ce69f675082386312ad1625fdcfc6a353970596d1fcaeed0ee8c09550c57262f3a06c127735ab4833313b9a4a1b33e08cb326d63817986140ae","ssdeep":"768:YrsA7P4vStxf1SN+YiZhueY+O5ceq0PR0ge6mEuQ6M:YHP5vNUeY+wce55Be6d","tlshash":"8f83969104272150c35718c271fe3e3aaa0fb246a4c5982dbbfcc6e55deac71e261f9d","first_seen":"2026-04-28T16:15:35.303125Z","last_seen":"2026-04-28T16:15:35.303125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":261,"dns":144,"connect":1,"send":0,"wait":45,"receive":1,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/kaushanscript/v19/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/kaushanscript/v19/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.globalsupportcorp.com/\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 34748\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Tue, 09 Sep 2025 18:30:03 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34748, version 1.0","md5":"4648267a9594b2ffc11f4440c2637426","sha1":"e328256413c237b5b096b900127f78ca626b98a8","sha256":"addcc80ddcc170ff8c97140ab37ac380ac4e6d0b8fd14e5d107b4cb87ffd778f","sha512":"289549a864a98fe91660c921abf7e2682b4f80ddd8e2dfb5e148dc6efff49f3746ad88d76e9e1de129eb03a2152a9872076d1d34ae3f428e8350d40fbfa3804b","ssdeep":"768:2kpuXAG6hF2dZTBBhGFcLdcD+24SI7pNjZrJMBG138gXz:WXH6wZTzCc5ykBtN1/138Ez","tlshash":"58f2f10e9357a8d241d28d632fe08b44d59863b061d4bdf05da5e653df09c2cae2633f","first_seen":"2025-09-11T13:59:28.348686Z","last_seen":"2026-08-09T04:25:19.179689Z","times_seen":1297,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/starfield/duel/v2.5.8/duel.js?appid=O3BkA5J1#TzNCa0E1SjF2Mi41Ljdwcm9k","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /starfield/duel/v2.5.8/duel.js?appid=O3BkA5J1 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nlast-modified: Thu, 24 Apr 2025 06:16:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4286fba89cc283c837371caf8a4c01a1\"\r\ncontent-disposition: inline\r\nx-amz-request-id: tx00000c90bdbbdaee2dbfc-006956a0a1-35964ffa9-default\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Wed, 28 Apr 2027 16:15:08 GMT\r\ndate: Tue, 28 Apr 2026 16:15:08 GMT\r\ncontent-length: 15034\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004)","md5":"4286fba89cc283c837371caf8a4c01a1","sha1":"2a249707c17c54e75342bc9435a2ee4f70ffa844","sha256":"bcdb57ca019cc7e63031b471b3c0e3639d6c59a07e4334fb26b9e389e8b4fe10","sha512":"a1b4abdb569ad8e942eed143d7137db3575aac2bdbac6b079ad70d58dd5f662ae38fe9da6b4d55012e2ad05b3b86664ee18f38074d3786d892c466f833c6578d","ssdeep":"768:qqghjvuUf1Z0VNg9Kiw4RV8XW/JLkybSApjoVsxMl8vIUw:RghjZfYVUKiw4RVX/xD+VaMqvIUw","tlshash":"2203fac97b92b067a7a635f1916f000bb13a89e2f54c8870c15ce8e07c799ad417bf5e","first_seen":"2023-06-30T09:29:46Z","last_seen":"2026-08-09T04:25:19.236563Z","times_seen":406,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":39,"connect":14,"send":0,"wait":25,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/07ee4d6e7542ca204ce32992799759d0?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /07ee4d6e7542ca204ce32992799759d0?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2559\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDNE4655056EC5F90B1E8510709C92974B9\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 07ee4d6e7542ca204ce32992799759d0\r\nx-cloud-object-name: resources/a625212e-aed5-4d73-a945-b29d0091e7b2-cropped-notepad.png\r\nx-cloud-version: d08502c3e2e95a231ed1fd0fd2443d26\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:14 GMT\r\ncreated-date: Sat, 17 Oct 2015 00:50:10 GMT\r\netag: 85522e6db33842801537d3985eebfdcc\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"85522e6db33842801537d3985eebfdcc","sha1":"37b42eb28330c1be1e311695d37c044feed106fe","sha256":"74e898e6f1180c0e7326e10cd06bdf45723293633346980905722ab5b1097ec9","sha512":"47bc8043957f4f2d5470dfb53e110d7725aec228c01ab549150d466c1239ebd1715405ac22effc5ca2b7461adb4da808bc6fbb723471d3b01f499de603dcdd84","ssdeep":"","tlshash":"01515da006383be857cf7fa1a7c47f189082d587011996884f6d7a0979cf91cd4b4bed","first_seen":"2026-04-28T16:15:35.305451Z","last_seen":"2026-06-04T04:48:51.816845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":68,"dns":2,"connect":4,"send":0,"wait":572,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:24.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1777\r\nOrigin: https://www.globalsupportcorp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1777,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"27d34eb045dd4c089f15c99602ff5cb0\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"27d34eb045dd4c089f15c99602ff5cb0\",\"host\":\"www.globalsupportcorp.com\",\"path\":\"/\",\"location\":\"https://www.globalsupportcorp.com/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"fd7aa883-300f-46fb-a796-3a0cd8d33ef5\",\"sessionId\":\"fd7aa883-300f-46fb-a796-3a0cd8d33ef5\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-04-28T16:15:24.714Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1777392908555,\"connectStart\":1777392908437,\"domComplete\":1777392924709,\"domContentLoadedEventEnd\":1777392909452,\"domContentLoadedEventStart\":1777392909446,\"domInteractive\":1777392909360,\"domLoading\":1777392908740,\"domainLookupEnd\":1777392908437,\"domainLookupStart\":1777392908292,\"fetchStart\":1777392908291,\"navigationStart\":1777392908042,\"requestStart\":1777392908555,\"responseEnd\":1777392908600,\"responseStart\":1777392908579,\"loadEventStart\":1777392924709,\"loadEventEnd\":0,\"pageLoadTime\":16667,\"domContentLoadedTime\":1404,\"domInteractiveTime\":1318,\"pageDownloadTime\":21,\"domainLookupTime\":145,\"serverResponseTime\":24,\"serverConnectionTime\":118,\"redirectionTime\":249},\"paint\":{}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"WSBv7\"}},\"producerEventId\":\"8abc906c-5130-4458-ad7f-8bd50b480be6\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":13280,\"encodedBodySize\":9340,\"decodedBodySize\":81132}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 155673736415456618202778987190304296167\r\nx-envoy-upstream-service-time: 82\r\nx-error-info: 0\r\nx-request-id: 51c45f62-fe16-40ae-9465-d8cc983826ed\r\nExpires: Tue, 28 Apr 2026 16:15:25 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 28 Apr 2026 16:15:25 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-09T06:48:33.279765Z","times_seen":757605,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":28,"dns":11,"connect":1,"send":0,"wait":221,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nebula.wsimg.com/8fb66afdab7b517c682d9c8391f15660?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1","fqdn":"nebula.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.globalsupportcorp.com/","date":"2026-04-28T16:15:08.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /8fb66afdab7b517c682d9c8391f15660?AccessKeyId=19B531EB110D52D2650B\u0026disposition=0\u0026alloworigin=1 HTTP/1.1\r\nHost: nebula.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.globalsupportcorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 21042\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: Express\r\nx-proxied: false\r\nx-cloud-request-id: GDN8499D770AC4B9E19BD2E77343E41A674\r\nx-cloud-bucket-key: ee1462975b92dadbebd8d57e9651a0f5\r\nx-cloud-bucket-name: resources\r\nx-cloud-object-key: 8fb66afdab7b517c682d9c8391f15660\r\nx-cloud-object-name: resources/847131ce-71cb-40ac-bce5-74e86acab8fd\r\nx-cloud-version: 738009753a9b63e2d769a28cf117de6f\r\nx-cloud-acl: public-read\r\nx-cloud-meta: \r\nx-cloud-public-bucket: []\r\nlast-modified: Tue, 06 Aug 2019 22:22:13 GMT\r\ncreated-date: Fri, 19 Dec 2014 22:59:48 GMT\r\netag: 3b8811cae060f6faaa802c4130e18dd3\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=31536000\r\ndate: Tue, 28 Apr 2026 16:15:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 156 x 163, 8-bit/color RGBA, non-interlaced","md5":"3b8811cae060f6faaa802c4130e18dd3","sha1":"239e8dc87347348d8f2cd5dc5081a615259285d8","sha256":"b5a783137d38311a54e8f184f453750015869fcc834ca9aad607cdfbcd247c77","sha512":"fd62ca4839c9b78eb911eef6ef5446e2d5f09dcd527b10ddff49dc33dc62de85c9f8c3873bf87c161c1db7127ab7923b41fce96cb3fbcaa64e7c2d2c302054b7","ssdeep":"384:y9oHlnvQrAyDrVSctcumIZW459Gf4xmrn/rJJInKBqsa+G494anRGR5crx:ywo9/Vl/59GfH/VJInKBqsa+l9hRGR5u","tlshash":"8792e0e6609405e110232e2d9d3dfed1e50010ee45b933afa052a907ee6f77ed864c0d","first_seen":"2026-04-28T16:15:35.30618Z","last_seen":"2026-04-28T16:15:35.30618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
