{"report_id":"62c4969b-df42-4a4f-8976-c8fab1ddd2a5","version":0,"status":"done","tags":[],"date":"2026-09-17T03:39:23Z","url":{"schema":"http","addr":"docusign.topmediapp.net/auth/document/review/Mac","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/utility.php","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"title":"e-sign","dom":{"size":302759,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65389)","md5":"9d8c66f674d9fa243e62b4511e96eff5","sha1":"4997c68a779ec75fa0a07b8bb029e91ae8091f25","sha256":"6a17ff95f449ffecc95e7b4e7a55d3d6d93f1fb915ba4584d1183379e6a15c7f","sha512":"1841e29655ee7894dfbc49dbe0ea528a3b6b9bd8bbe5227d44cb9d6b9853338d35ed082c87a3f5819150e17077f5bb9aee2a74b93732391ca748b26c8c70d076","ssdeep":"6144:6Edo2Cp6Edo2Cp9UNuO+L6qFnxw7Ap27rpZioq:6Edo2Cp6Edo2Cp9UNuODqFnqkp27rpZS","tlshash":"4854123157813dbb583cca8c71d13e842ed8decfc6b8524535f5a0e282ee752adb1259","dom_hash":"domhasha54d4d55d051a5234c8cada3651a2beb","first_seen":"2026-01-31T21:22:59.952753Z","last_seen":"2026-09-17T06:56:21.952356Z","times_seen":475,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"docusign.topmediapp.net/auth/document/review/Mac","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:39:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"docusign.topmediapp.net","ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-25","domain_rank":0,"first_seen":"2026-09-16T21:06:54.26524Z","last_seen":"2026-09-16T21:06:54.26524Z","alert_count":5,"request_count":5,"received_data":6135870,"sent_data":2629,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/utility.php","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cbb9abdf7f115c3a8680e26926a8eff","sha1":"a1044d634b6de6472a9d233d2002d7e40a73fe59","sha256":"fa3cb0eb2843ce441c0be861e48c4f8bf8b15200c924fce53ea55214db7f9fb6","sha512":"a920ba041db6e6a01cd98b76860d4a12dc18ed5efd870937a2136050590a55af1d9f0e8d51185358498222b225a869e533202254b71f0a2d5fb72a9a02c4c0b7","ssdeep":"","tlshash":"c2d0220e38a1660028656412142e25ca703b3572200c880c7c8e5ca81f0a34e401fed3","size":215,"data":"","first_seen":"2026-06-07T08:43:53.634316Z","last_seen":"2026-09-17T06:56:21.954712Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:43.048Z","timestamp":1789616323048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topmediapp.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:25:50 GMT","end":"Sun, 29 Nov 2026 22:23:21 GMT"},"fingerprint":{"sha1":"F4:02:47:42:86:67:9D:41:7F:89:65:70:9C:34:C3:2E:48:93:EF:27","sha256":"C7:5D:2B:C0:DF:71:5F:EA:EE:97:9B:B7:A1:88:99:AC:EC:53:F0:85:F7:1C:62:5C:7A:8C:47:9A:68:B3:1F:BF"}}},"request":{"raw":"GET /auth/document/review/Mac/ HTTP/1.1\r\nHost: docusign.topmediapp.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 17 Sep 2026 03:38:43 GMT\r\nserver: cloudflare\r\nlocation: visit.php\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6fXRL8L2OnE7azSnejlB2kBgBhvX9YZKOWssgwWi5Qse2I6qBWlYLhDsk%2FKbHKP0I7hrvKOpF%2Bc055PiYN1eV2Lew7doM0oaT%2FyOrwfbu7XUiBvD5i6pJcBQNM%2FIG3goPJBuXeTO5GiFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c514631a09568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/download/index.php","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:47.498Z","timestamp":1789616327498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topmediapp.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:25:50 GMT","end":"Sun, 29 Nov 2026 22:23:21 GMT"},"fingerprint":{"sha1":"F4:02:47:42:86:67:9D:41:7F:89:65:70:9C:34:C3:2E:48:93:EF:27","sha256":"C7:5D:2B:C0:DF:71:5F:EA:EE:97:9B:B7:A1:88:99:AC:EC:53:F0:85:F7:1C:62:5C:7A:8C:47:9A:68:B3:1F:BF"}}},"request":{"raw":"GET /auth/document/review/Mac/download/index.php HTTP/1.1\r\nHost: docusign.topmediapp.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:38:47 GMT\r\nserver: cloudflare\r\ncontent-description: File Transfer\r\ncontent-disposition: attachment; filename=\"docusign.dmg\"\r\npragma: public\r\ncache-control: must-revalidate\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9aVAfTDHKNChqaMOCNd%2FkbeJWrL6ZaImgDMNa2CsyAU5591JlOK7wLCSbEO04e5st7Lo%2BUZXaiyz86T0KUvCmdFhFTmZ6L7Q38Pmp%2BICdOz4SxxG84WVroPLDL630aLFLG6ozHrqYD0Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-type: application/octet-stream\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c5147eeb0c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5829950,"size_decoded":731,"mime_type":"application/octet-stream","magic":"zlib compressed data","md5":"2bb9197f59e9f58baf09efa5781df5e0","sha1":"9d54a3b3a53722417f109a54712f4c23f2225159","sha256":"c9c043f55f56d0bb810c2f18894406be5d39080dd079a6552e57c514481e7446","sha512":"7f0dd4537bc858e0e973871ac9a51521d45004eae0a492e17f81aad325354710dd2ceda084a17b34cfea51b86424b019c75e8e91dcb80e916ac2ffb514cc5f4d","ssdeep":"24576:JpZEEKuG0Inx+vc5uTyQrYKu6GY+LqURLG:vZEoGLnx+aQM/RLG","tlshash":"132533cb5ebfb7b8ef674fb640052ad6ad25870e5fde4861f88c8ca4e9d81508134427","first_seen":"2026-05-05T22:36:13.901746Z","last_seen":"2026-09-17T06:56:21.953101Z","times_seen":67,"resource_available":true,"data":null}},"time_used":1859,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1713,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:42.576Z","timestamp":1789616322576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topmediapp.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:25:50 GMT","end":"Sun, 29 Nov 2026 22:23:21 GMT"},"fingerprint":{"sha1":"F4:02:47:42:86:67:9D:41:7F:89:65:70:9C:34:C3:2E:48:93:EF:27","sha256":"C7:5D:2B:C0:DF:71:5F:EA:EE:97:9B:B7:A1:88:99:AC:EC:53:F0:85:F7:1C:62:5C:7A:8C:47:9A:68:B3:1F:BF"}}},"request":{"raw":"GET /auth/document/review/Mac HTTP/1.1\r\nHost: docusign.topmediapp.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Thu, 17 Sep 2026 03:38:43 GMT\r\nserver: cloudflare\r\nlocation: https://docusign.topmediapp.net/auth/document/review/Mac/\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1ckz54wEovSl%2FLaJeNN22iUGIX6%2B5D0Emmwx0Gk4Ft5Pk8fFD2xjXJpFSTiGBx95GVQRtpQFux5h1TvuVieKnUJnCulNOjqILX%2Bg4BAl73YI74LaGJvF77WxZyKDAlX8h1eC5QPzjPPNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c5146049e9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":9,"connect":16,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/visit.php","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:43.233Z","timestamp":1789616323233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topmediapp.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:25:50 GMT","end":"Sun, 29 Nov 2026 22:23:21 GMT"},"fingerprint":{"sha1":"F4:02:47:42:86:67:9D:41:7F:89:65:70:9C:34:C3:2E:48:93:EF:27","sha256":"C7:5D:2B:C0:DF:71:5F:EA:EE:97:9B:B7:A1:88:99:AC:EC:53:F0:85:F7:1C:62:5C:7A:8C:47:9A:68:B3:1F:BF"}}},"request":{"raw":"GET /auth/document/review/Mac/visit.php HTTP/1.1\r\nHost: docusign.topmediapp.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 17 Sep 2026 03:38:43 GMT\r\nserver: cloudflare\r\nlocation: utility.php\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKEhIKCzsXxWuSfyPTrQibRuB580%2B83dG9%2FFNGx1GJmM9AbI49zc6qB9%2BwPI1a4kONneOojsc1guG1IjeyrEblA0fr5%2BymfkES4dETBVKaEikvPSbwcLKtboDP20pPNyfrEFrsG%2FuAttaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3c514643a0f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusign.topmediapp.net/auth/document/review/Mac/utility.php","fqdn":"docusign.topmediapp.net","domain":"topmediapp.net","tld":"net"},"ip":{"addr":"104.21.38.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:43.782Z","timestamp":1789616323782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topmediapp.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:25:50 GMT","end":"Sun, 29 Nov 2026 22:23:21 GMT"},"fingerprint":{"sha1":"F4:02:47:42:86:67:9D:41:7F:89:65:70:9C:34:C3:2E:48:93:EF:27","sha256":"C7:5D:2B:C0:DF:71:5F:EA:EE:97:9B:B7:A1:88:99:AC:EC:53:F0:85:F7:1C:62:5C:7A:8C:47:9A:68:B3:1F:BF"}}},"request":{"raw":"GET /auth/document/review/Mac/utility.php HTTP/1.1\r\nHost: docusign.topmediapp.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:38:43 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPeZiia4eWfpVe5RH%2Fu8Ycu5qs4CkCwTYw7WjMsbcEWXUL%2BsxJXQWrGsXnM39zFnog9jJnQMG76tpF%2BTnBG4GMx1of8i2AC7bAQDZEkfj7FSmHCDubDAv%2FJ1fd%2Fiac8xKXyPxqqn%2BM5CWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3c51467aa22568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302727,"size_decoded":170685,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65396), with CRLF line terminators","md5":"a4fad45bae1a2d71b2b81847cd09f90e","sha1":"c8907b421c7cb2666c1b1830b8375d8efa0b269c","sha256":"e9e6a6a564cf56c00a63b49feba06b479fa7538672afb503c6c3041677c4ba39","sha512":"cedfe21719372d4bb330035029aa0fdfe776650ddd33a7e10c32e7fc2b89f4069043147f915de9a3e9e6c3ad321a4e641ce278523ce91b3019aaae45d6cec56d","ssdeep":"6144:1Edo2Cp6Edo2Cp9lNuO+L6qFnxw7A+27rpZiow:1Edo2Cp6Edo2Cp9lNuODqFnqk+27rpZI","tlshash":"9654123157813dbb583cca8c72d13e842e98decfc6b8924535f5a0e382ee751adb1259","first_seen":"2026-01-31T21:22:59.958676Z","last_seen":"2026-09-17T06:56:21.954174Z","times_seen":546,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":520,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"docusign.topmediapp.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}