{"report_id":"21c56b66-b26e-4186-b2bb-4d83c08825a2","version":0,"status":"done","tags":["docusign","phishing"],"date":"2026-08-08T13:21:27Z","url":{"schema":"http","addr":"esign.social-statements.com/","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"esign.social-statements.com/","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"title":"DocuSign","dom":{"size":4055,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (461)","md5":"2316f222c6fbe15b436d0987a666dc14","sha1":"7c120d328e8e6df1040a7880b633a38064c094be","sha256":"d338967e3d2cac2e33228408aaf7d27383b9ab1ff7f158f50d4050a404fb9b97","sha512":"0f6b17a68dbd7500775f0c2126b8ae4f481f972fa2a9f38a3550301511cecaa4d637e1eeff381a5cd19e3ecea941fc1d8a8047014d6c21c1701380c3b21a595b","ssdeep":"","tlshash":"c181b5373005203a5d670adab9bbf39bbc9386a29d47980128bd45d8c6e1fd1c43b9d5","dom_hash":"domhashae748662d9865e2c0bc9890ce9740c59","first_seen":"2026-08-08T12:57:05.149288Z","last_seen":"2026-08-08T13:44:44.915056Z","times_seen":29,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"esign.social-statements.com/","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T13:21:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]},"summary":[{"fqdn":"esign.social-statements.com","ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-08-08T12:57:01.225013Z","last_seen":"2026-08-08T12:57:01.225013Z","alert_count":24,"request_count":6,"received_data":1808068,"sent_data":3180,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-03T07:56:26.149753Z","alert_count":0,"request_count":2,"received_data":418053,"sent_data":983,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"docucdn-a.akamaihd.net","ip":{"addr":"95.101.10.32","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":51084,"first_seen":"2014-04-10T18:55:33Z","last_seen":"2026-08-06T11:53:02.63606Z","alert_count":0,"request_count":2,"received_data":588,"sent_data":1220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.docusign.com","ip":{"addr":"15.197.167.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-06-14","domain_rank":65034,"first_seen":"2012-10-04T12:14:07Z","last_seen":"2026-08-03T12:39:00.767884Z","alert_count":0,"request_count":1,"received_data":10104,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"8abb2af4e2ebe32786dd48eabd92ba3f","sha1":"b7c52a190ee65764afc0e8a46d53b2ceb6840d09","sha256":"eb103cb23fac42cc14e2e1efb4bc55839c5011da1159d3b9a9e02ad05cda0eb2","sha512":"a8ae24ecaeae5aff2b051ee515974917f14980e6a554b2eb0ae3e6075900d4c7c96bd163ec02a3fc5691d0145156b92ca35b5f209576cf288e49d628009b5dee","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 5 sections","size":1725848,"url":{"schema":"https","addr":"esign.social-statements.com/api/My_DocuSign_10229302930.exe","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b70325a771f5986425f6d81eb9399724","sha1":"a24cde938a38460e29a94cf91ae727f996649520","sha256":"8550d4d51d4046fab58c9e9c786bdd62e2a1e917102389f9a94138d2b397c6a0","sha512":"ae25f8d1e3fd5c665eacc2c104984a95e61f47a164aa5d134ef330a8a251c2aad02426b76d244db6f726c3832b29101b89bd77d906dab7428351543d795bc7b6","ssdeep":"3072:TcgdZ5XUpHNBZwwzYghf1I7Q/I3TRPO4LTQ9iZvjcT8ZL5XxL1cuJVwj3cEdkaEo:4o/zuhf/t8ZL5cwVwpd3J","tlshash":"4b9473af8fcc269f4d56e7881a4bb0111fed93bd332a8d12758e963bc252416dcb3611","size":416658,"data":"","first_seen":"2026-08-07T21:11:02.419458Z","last_seen":"2026-08-08T18:00:23.601096Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esign.social-statements.com/","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77d30caac3f597b330b619929f07c5a4","sha1":"44a65e9b8a201a47deb1133aad17bccd8c3c82cc","sha256":"323e201d7d22b1d1f69ca8dbbdff9ddaac8ef366f470b7adb465a5f4aa087c02","sha512":"5b102a5adbde190b286ef615e545ca4752eb64f71c23e5ba8d5fc37f86c48651d137518688ac334ab22d655e5f0cf793789bb3d9dded980a552d2c43e0bb3f11","ssdeep":"","tlshash":"0f21ce7b361655340cbd1eab656fc7c97cb615616c4b94001d1c985cc9b8f91403faeb","size":1369,"data":"","first_seen":"2026-08-08T12:57:05.158145Z","last_seen":"2026-08-08T13:44:44.929171Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"esign.social-statements.com/assets/img/logo.svg","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.024Z","timestamp":1786195259024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Aug 2026 12:56:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 02:19:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7KzZ7Mf9Q9QydtV2pKOw76FtV4iZPNQty71EEyeeF1loikY5loJOnlvn7WHoMXALW37d5fjFtr%2BhjoGfvGiLYDPFfhh6tU90KaaPOwGKFNLT5fi61EaC%2FHBfxFfyxT5G5fNWYoiHk9UFT0vX6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27ed250efcac272-OSL\r\ncontent-length: 2167\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5419,"size_decoded":2985,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"340a74914f7eb786e90d6c30670b21a4","sha1":"899d8915ea8ddaa2dc6f96f922ecb794c3fcb3dd","sha256":"a30733cada880fa8dadf378a47ff7fd4678f6662cd4446684fe5f3df9e04c37a","sha512":"2b0ba46a4baeecdd65754da413ff359253c77547b1ed8129a3cea4a960d110953e2de91285c6cf5463d66a38e0c397fd82ff4fee28d948193337b5212632be71","ssdeep":"96:4TMm8/og1wdCb9RPJ6D4GOOM1VWQaFzci54KAXqb53BOIfcAq8XYeDtStzBRF:4TM3RJ6D4GOOM1oZq65ROwOt9RF","tlshash":"4ab1a6d15b7d63a8f909e7e4fd62e6b4251a38fa3fc589e0c2589cc568431dc9c85cc0","first_seen":"2026-08-08T12:57:05.15418Z","last_seen":"2026-08-08T13:44:44.922429Z","times_seen":29,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"unpkg.com/lucide@1.30.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.072Z","timestamp":1786195259072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /lucide@1.30.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a27ed2512c89c759-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 23922\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 08 Aug 2027 13:20:59 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:43:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hVDU1R1ARvq1jJ6ceGvdYuKh6RcQI4n5qUE40rOXxqA=:\r\nfly-request-id: 01KZDSNJ8X1N14M724MQMP1KFX-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416658,"size_decoded":98232,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65369)","md5":"b70325a771f5986425f6d81eb9399724","sha1":"a24cde938a38460e29a94cf91ae727f996649520","sha256":"8550d4d51d4046fab58c9e9c786bdd62e2a1e917102389f9a94138d2b397c6a0","sha512":"ae25f8d1e3fd5c665eacc2c104984a95e61f47a164aa5d134ef330a8a251c2aad02426b76d244db6f726c3832b29101b89bd77d906dab7428351543d795bc7b6","ssdeep":"3072:TcgdZ5XUpHNBZwwzYghf1I7Q/I3TRPO4LTQ9iZvjcT8ZL5XxL1cuJVwj3cEdkaEo:4o/zuhf/t8ZL5cwVwpd3J","tlshash":"4b9473af8fcc269f4d56e7881a4bb0111fed93bd332a8d12758e963bc252416dcb3611","first_seen":"2026-08-07T21:11:02.419458Z","last_seen":"2026-08-08T18:00:23.601096Z","times_seen":35,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docucdn-a.akamaihd.net/olive/images/2.20.0/global/brand/docusign-esig-footer-logo.svg","fqdn":"docucdn-a.akamaihd.net","domain":"docucdn-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"95.101.10.32","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.209Z","timestamp":1786195259209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /olive/images/2.20.0/global/brand/docusign-esig-footer-logo.svg HTTP/1.1\r\nHost: docucdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccept-ranges: bytes\r\ncontent-length: 10\r\nserver: AkamaiNetStorage\r\ncache-control: max-age=31535677\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esign.social-statements.com/api/My_DocuSign_10229302930.exe","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T13:21:02.620Z","timestamp":1786195262620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET /api/My_DocuSign_10229302930.exe HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/x-msdownload\r\nlast-modified: Mon, 01 Jun 2026 14:12:01 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 08 Aug 2026 13:21:02 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1468\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FLCL%2Flza6uitggWV%2FTtiBJEPV8umkrkQGeKKoaGONSIboro3pR9vvcbn6m2G%2BTE9MNaKvfI5uJa4nTCXe8iXbLa24%2FBNHZOMqytbzlSSph18jKuYKxiyq56lafvGS15ar7ooP2mC3oWViCqSgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a27ed2675ad2c272-OSL\r\ncontent-length: 1725848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1725848,"size_decoded":744,"mime_type":"application/x-msdownload","magic":"PE32+ executable (GUI) x86-64, for MS Windows, 5 sections","md5":"8abb2af4e2ebe32786dd48eabd92ba3f","sha1":"b7c52a190ee65764afc0e8a46d53b2ceb6840d09","sha256":"eb103cb23fac42cc14e2e1efb4bc55839c5011da1159d3b9a9e02ad05cda0eb2","sha512":"a8ae24ecaeae5aff2b051ee515974917f14980e6a554b2eb0ae3e6075900d4c7c96bd163ec02a3fc5691d0145156b92ca35b5f209576cf288e49d628009b5dee","ssdeep":"24576:0D2NZqbMGO7yMRjiornbBxrCBphWrY6kPl/zh2OwN:0aHqbMGOOMRjiornbPOBrwIt2Ow","tlshash":"f025e06af7a618f5d9a7d938c6928363efb17158032463d707a08d666f333e06a3d305","first_seen":"2026-08-08T12:57:05.156503Z","last_seen":"2026-08-08T13:44:44.919829Z","times_seen":29,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"esign.social-statements.com/","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T13:20:58.543Z","timestamp":1786195258543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8hjNjuVS3Bq5U0kKJy67w2kgyUw35yYf3amQMktxVHo%2FdmkQKzTSaM%2Fkq4dxfdykCLxS3QgqfqHwbueDYgJeaERcGAZM3nnTuDc2NrS7932b1ybZqiE5dU4j7iLdPLJuzIgOJfRR03TQZy0Vc4%3D\"}]}\r\nvary: Accept-Encoding\r\ndate: Sat, 08 Aug 2026 13:20:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27ed24e0f75c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3660,"size_decoded":2251,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"af38f011d23efe7f5b890ea9aaace928","sha1":"44b10f2653238708377f576c9ee24b765a4a5e7c","sha256":"48f1c2d47a4b45fcc68b6aa20f168a0c8414a4825a30721203e1aab8770d7c0d","sha512":"a9b033186bddaa3cb625dd131d0060769e1250ddca0621faeca5ea85553359e0937d14107e59d2996d029ac9ca7f9a0a2823a6841afb33b5b8b19c8718ecf964","ssdeep":"","tlshash":"3371c9373015103a1c6309dab9bbe78ffc938a62dd87980129fd55c8c6d1ed1c43a5d5","first_seen":"2026-08-08T12:57:05.151315Z","last_seen":"2026-08-08T13:44:44.925757Z","times_seen":29,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"esign.social-statements.com/assets/css/styles.css","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.013Z","timestamp":1786195259013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Aug 2026 12:56:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 02:19:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBZEosvJBuALzVOIHzJq7b55e8Ju7C7KtAVQD6KAaAL5P7E9ASvMuhq%2B8qUZ3YMC24Rv2rt7Fd1D4i1Q1AQiL0qrREAeWV9ASj28tBQawAolBnUMMcMkwS9Z3%2B1zGrNN4sPzz03Bl%2F125bDXIBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a27ed250dfc6c272-OSL\r\ncontent-length: 1864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7592,"size_decoded":2682,"mime_type":"text/css","magic":"ASCII text","md5":"0d26bfd5d45a7ba178605d4dab621044","sha1":"179bab618878fa24a78cbf6bf3d658c620c393a9","sha256":"c3cdad9ce3b819a2bb06cbb7bdb3191455a28482ba08764f68d203d37e69c47c","sha512":"e74ce60ef6195cef64bb68302a70d6d4b9d9135b4a814977f4515821b9612d1d1b27ac1309cb501a4810b5f9b5d1fe7d1131d73f1593d4db130777a8a8fa8c5d","ssdeep":"192:SOdiFhXtQu62Hp8KWDBNi7bWt7pC7dlBFm:SOduNtQ88ym5Ym","tlshash":"6ff178727609612cb03bd4a2b891bbefb040d413d4aa57adeda67029c9c65f71b35b0c","first_seen":"2026-08-08T12:57:05.152518Z","last_seen":"2026-08-08T13:44:44.926866Z","times_seen":29,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.016Z","timestamp":1786195259016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 52\r\nlocation: /lucide@1.30.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a27ed250eb94c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docucdn-a.akamaihd.net/olive/images/2.20.0/global/brand/docusign-esig-footer-logo.svg","fqdn":"docucdn-a.akamaihd.net","domain":"docucdn-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"95.101.10.32","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.026Z","timestamp":1786195259026,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /olive/images/2.20.0/global/brand/docusign-esig-footer-logo.svg HTTP/1.1\r\nHost: docucdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccept-ranges: bytes\r\ncontent-length: 10\r\nserver: AkamaiNetStorage\r\ncache-control: max-age=31534679\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.docusign.com/favicon.ico","fqdn":"www.docusign.com","domain":"docusign.com","tld":"com"},"ip":{"addr":"15.197.167.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.218Z","timestamp":1786195259218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.docusign.com","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9F:85:C4:04:DA:86:44:DD:C9:9A:B8:44:19:B5:AF:2C:8A:EE:53:23","sha256":"15:29:EF:C8:42:AF:5B:5E:83:65:9F:A2:38:FD:E0:04:86:88:2F:63:7E:0E:27:A9:9F:20:72:1B:58:25:0F:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.docusign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 4187\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31531814\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\netag: \"41514726aa55a530aca8e44ec9a4b727-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KZGRHBWGQEAFBZ0ZG6VARWMQ\r\ncontent-length: 367\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":9662,"size_decoded":809,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"47878c4532b1eec5302d1b89b9d2d7aa","sha1":"5be8f103fddfc95cc2bcb4d262e210ae97ccdf3b","sha256":"c5835e96f0a912584cd74f41486c326f88220ed02fbecbe71847c62b7f7e78d1","sha512":"8ed42f560a9cbbd3a1149a3fb599f2893739119e9c4165d8b7988d87b02d69771560d87be9020ff5d34ce1773cdc22fd78a421a9e6da755e10162d908f65b22a","ssdeep":"48:9I11111111111111111111lU11111111111111111111t111111111111111111v:9yMu7Nj+b2wJ","tlshash":"b512ff35a51284bcc449377fc8a5cdbf3e256c84aa10256f33d93eab3ab19c78427315","first_seen":"2024-07-23T05:18:55Z","last_seen":"2026-08-08T13:44:44.918814Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":25,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esign.social-statements.com/assets/css/dsindigo-semibold.woff2","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.226Z","timestamp":1786195259226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET /assets/css/dsindigo-semibold.woff2 HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Aug 2026 12:56:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 14 May 2026 02:19:44 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAqPovQ7qTtcVfFunAMHO6VAhrneDAxaetvmP%2FqFT4IuXKVZSw7ViHXZjfdQWdWeXA6tIdMCURB5RrOR0A1n9vdb62luqONizLrGEI02Hvp%2BM2OC0%2BMaQVD%2B0zz3XqTq7%2FggPTd9wMOdCHLtHvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27ed2522ff7c272-OSL\r\ncontent-length: 31436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":31436,"size_decoded":32216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31436, version 1.0","md5":"ba0e987e564cd3409e9d6f690d641f55","sha1":"1c2684bd20c775b7497796c2fa66ad4943f6b824","sha256":"346cfd3df3dbb80d08655ae396a413f66cbccfcf201eae36a6403dcf7ed372bc","sha512":"dfba7d6b8114c9dd1a3288e053f6e7c18a1909f6cbbdf35e46b1972e15497d1c35fe1007fc90caf111d20ab036d9e1c73c15edd7b2bf24f24ca4a2a36eba571d","ssdeep":"768:lIQXpJaSv1p16Copvvta/RKIxLD+fSw88A9mWLkYWsxMppOD95:eSNzxopta/8IZGA93LtxMppOL","tlshash":"f0e2f198cdd5dd934dd4167ec4398b88e361b42cca9d89d33ea9e5293830a0c31ae639","first_seen":"2023-05-01T17:05:01Z","last_seen":"2026-08-08T13:44:44.923558Z","times_seen":2121,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"esign.social-statements.com/assets/css/dsindigo-regular.woff2","fqdn":"esign.social-statements.com","domain":"social-statements.com","tld":"com"},"ip":{"addr":"172.67.166.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://esign.social-statements.com/","date":"2026-08-08T13:20:59.228Z","timestamp":1786195259228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"social-statements.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 20:39:42 GMT","end":"Mon, 26 Oct 2026 20:39:41 GMT"},"fingerprint":{"sha1":"69:E1:BC:D2:A1:C8:AF:0E:51:A6:C2:58:D6:25:99:C5:ED:06:70:B1","sha256":"15:20:CC:D6:FA:F5:CA:67:63:AC:C2:52:CE:88:63:0E:29:9C:C6:4B:0C:A8:A1:A1:45:A1:48:ED:60:59:47:27"}}},"request":{"raw":"GET /assets/css/dsindigo-regular.woff2 HTTP/1.1\r\nHost: esign.social-statements.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esign.social-statements.com/assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Aug 2026 12:56:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 14 May 2026 02:19:44 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 08 Aug 2026 13:20:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqGqCzTa5Z%2F%2Fs%2BP9E2mZwtZFC%2B29enyOYxCfAxfRZGqs8LtNQr6U77fXSqxWRocIM3I4UdTc91JLZr9Ib%2BADxxsj67wPqKycMMgbbeLCvBZAdQ%2BsuVb6oorMmynQ3fEOnpmkyk9XVMBELweQg60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27ed2522ff8c272-OSL\r\ncontent-length: 29516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29516,"size_decoded":30298,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29516, version 1.0","md5":"5d66c3d97d4f69a2b3527e3997cbb66b","sha1":"94ef4f31c1a1cd780a172edfbf9e3de61697ef5a","sha256":"1bf53b33743c5c45d6c944815f74cbf58b228806858fb6e3a0b86c1204f4be06","sha512":"feb229cf976dc037130ce7e7a6c0e32fa8bd0c63382b0ffad82e4448767b88f8c17c431055bf834af6a5e92e2d34a6ec7432afdabcea9fae867517613afd3621","ssdeep":"768:YDWMT03T1/sy4Upj+7eLeD2qaWOJEPiAnKJ/JJzySg41:l35/syg7eLeD2PaiaKAV41","tlshash":"4cd2d146fe1d417ce5b277207aab289e0b333c533a6147b91323985a5c68ed2d9c11b6","first_seen":"2023-05-01T17:05:01Z","last_seen":"2026-08-08T13:44:44.924677Z","times_seen":2616,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-08","alert":"Phishing Block","trigger":"esign.social-statements.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"esign.social-statements.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}}]}