{"report_id":"6874bf1c-a290-4538-aa26-90708990ff02","version":0,"status":"done","tags":["dhl","logistics","phishing"],"date":"2026-08-12T13:37:36Z","url":{"schema":"http","addr":"digitech.pk/dhl/dhl","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":0,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"digitech.pk/dhl/dhl/","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"title":"DHL","dom":{"size":18985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8278)","md5":"250991a954ce81bacfacaddbe913837a","sha1":"bc567df9b8b0f14279c1f2bf961f5d62bf4a337c","sha256":"39eb4f056f7aa7984f9dc207f1f41720d406257a562c8759bb3d61eea0f71c47","sha512":"da83c97e2f57b5393c158812a5c2bcb4438179cf101114752a47310d3d6a4eb94d6891da1ce3b79203f8e8491d064455386ba9a3646ca454607b4ef762516d00","ssdeep":"384:m/xmWVkUEEZiylMD0AK6HunxvszngLJRaIbZo9HXahT9B2uCXrf2ncujhMJ0DmsN:m5mWVkz+Da0P415aFrCXrfohjhMJ0Dmy","tlshash":"9e82e9cdad2304b3676355a82f691b40a22dd9479987ce483c0cf3ccff5af59a522768","dom_hash":"domhashb9c06fefb6fd3f2c817b36fd47c26121","first_seen":"2026-08-10T00:34:47.344909Z","last_seen":"2026-08-12T13:37:37.472651Z","times_seen":10,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"digitech.pk/dhl/dhl","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":0,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T13:37:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]},"summary":[{"fqdn":"digitech.pk","ip":{"addr":"207.244.233.84","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-12T05:57:32.641373Z","last_seen":"2026-08-12T05:57:32.641373Z","alert_count":2,"request_count":2,"received_data":19443,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.dhl.com","ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1989-05-25","domain_rank":12081,"first_seen":"2012-07-02T16:21:37Z","last_seen":"2026-08-12T08:36:01.595866Z","alert_count":0,"request_count":1,"received_data":2031,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets-mediahub.dpdhl-brands.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-10-31","domain_rank":0,"first_seen":"2026-08-10T15:37:51.429801Z","last_seen":"2026-08-10T15:37:51.429801Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":598,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mydhl.express.dhl","ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-07-14","domain_rank":29207,"first_seen":"2018-03-20T14:39:53Z","last_seen":"2026-08-11T00:51:53.336786Z","alert_count":0,"request_count":1,"received_data":3708,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"digitech.pk/dhl/dhl/","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"206a043f0ada62a1b1fa504f1efc6f26","sha1":"d4025ee1e9200da20449a3e87b4d7e1538d8af0d","sha256":"76d5b5998511a38b413e7e145a8a72903e9e3b9809980cde21b339dfc6c61764","sha512":"821f92ecfb1e5c88ffe496c2d6633317484198f23132301f326cd16e79d2d4a6bbe41b2451851709176209e7ecdefda58d5456946cfaa05afbfb09584d404eff","ssdeep":"","tlshash":"7d11669e059261e016e3713abb9f2204727602533c08d8053c4c03082f69d1bbefbbe9","size":922,"data":"","first_seen":"2026-08-10T00:34:47.355036Z","last_seen":"2026-08-12T13:37:37.481649Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"digitech.pk/dhl/dhl/","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdeb49f2dfc00fea1a1ac476f2fedf14","sha1":"6859888021a933206fab6d16f4b9b60b186ec310","sha256":"1f808486fc9c0224c66e6f002a6668e331294451cceeb31face701cf622ff3e9","sha512":"ccf9a852ac8ed939bb83b948f9d92d88dc1890fc830c5544ee5239aaedc4de7f1fe2c39a14a9cf68ed4be78364dcd2b14c6e22068e5b1ec47957427c4f16f82d","ssdeep":"192:Y6HunxvszngLJRaIbZo9HXahT9B2uCXrf2n9iCXjhMJ0Dmstphm1dmW0W76Btldw:Y6HunxvszngLJRaIbZo9HXahT9B2uCX9","tlshash":"460262ac6d2118f6127247de9c294a02c12ded99bed345c8a80ce6dc7c3df1d712ab79","size":8278,"data":"","first_seen":"2026-08-10T00:34:47.357893Z","last_seen":"2026-08-12T13:37:37.483097Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"digitech.pk/dhl/dhl","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T13:37:00.784Z","timestamp":1786541820784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"digitech.pk","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:18:43 GMT","end":"Mon, 05 Oct 2026 12:18:42 GMT"},"fingerprint":{"sha1":"76:25:3B:0C:D7:2A:8B:43:C5:28:CD:53:72:50:AE:96:19:3E:8D:B6","sha256":"B0:96:C9:86:18:86:BE:6E:97:D5:86:52:4E:66:5F:04:5B:B7:E8:E2:D4:76:1B:38:46:66:A3:1D:8C:F3:44:D7"}}},"request":{"raw":"GET /dhl/dhl HTTP/1.1\r\nHost: digitech.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Aug 2026 13:37:01 GMT\r\nServer: Apache\r\nLocation: https://digitech.pk/dhl/dhl/\r\nContent-Length: 276\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":151,"connect":130,"send":0,"wait":137,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"digitech.pk/dhl/dhl/","fqdn":"digitech.pk","domain":"digitech.pk","tld":"pk"},"ip":{"addr":"207.244.233.84","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T13:37:01.454Z","timestamp":1786541821454,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"digitech.pk","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:18:43 GMT","end":"Mon, 05 Oct 2026 12:18:42 GMT"},"fingerprint":{"sha1":"76:25:3B:0C:D7:2A:8B:43:C5:28:CD:53:72:50:AE:96:19:3E:8D:B6","sha256":"B0:96:C9:86:18:86:BE:6E:97:D5:86:52:4E:66:5F:04:5B:B7:E8:E2:D4:76:1B:38:46:66:A3:1D:8C:F3:44:D7"}}},"request":{"raw":"GET /dhl/dhl/ HTTP/1.1\r\nHost: digitech.pk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Aug 2026 13:37:01 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 09 Aug 2026 16:13:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 18951\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18951,"size_decoded":19194,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8278)","md5":"09d1b83db2b4edfade883894b93b2591","sha1":"6d28b79d0748bdc71540b689f366bdec69895fbe","sha256":"9d2c1f9b31fad73d4e45d9e8e81da1752aa53cbaf3d3af67495d1234b6df7afc","sha512":"05310cec8035984df4cb3aa6c60fe5b0120465b35050d17c08dace1977d363a9df34cbe477729fcf0fadc19797e4311de48ab6386597cbab4d30504d603ea43d","ssdeep":"384:8/xmWVkUEEqiyoMD0AK6HunxvszngLJRaIbZo9HXahT9B2uCXrf2ncujhMJ0DmsR:85mWVkznDt0P415aFrCXrfohjhMJ0Dma","tlshash":"ca82e9cdad2304b3676355a82f691b40a21dd9479587ce483c0cf3ccff5af596422768","first_seen":"2026-08-10T00:34:47.348434Z","last_seen":"2026-08-12T13:37:37.47592Z","times_seen":10,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.dhl.com/content/dam/dhl/global/core/images/logos/dhl-logo.svg","fqdn":"www.dhl.com","domain":"dhl.com","tld":"com"},"ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://digitech.pk/dhl/dhl/","date":"2026-08-12T13:37:01.940Z","timestamp":1786541821940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhl.com","organization":""},"issuer":{"commonName":"DPDHL Global TLS CA - I5","organization":"Deutsche Post AG"},"validity":{"start":"Wed, 29 Jul 2026 12:57:41 GMT","end":"Sat, 13 Feb 2027 12:56:40 GMT"},"fingerprint":{"sha1":"8F:08:7D:92:0C:77:2D:BE:E2:E7:9C:A6:57:3E:14:72:75:81:F9:FD","sha256":"84:7D:CC:04:7F:E1:70:E8:91:8A:F4:07:41:49:8E:04:6A:A7:FE:91:4F:B4:0E:EA:7A:5F:95:EC:C4:D3:A4:70"}}},"request":{"raw":"GET /content/dam/dhl/global/core/images/logos/dhl-logo.svg HTTP/1.1\r\nHost: www.dhl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://digitech.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'self' https://dhlinsights.dhlsupplychain.dhl.com https://dpdhlcsiace.my.site.com; default-src 'self' data: https: blob: wss://cctr-chat.dhl.com:443 wss://cctr-xchat.dhl.com:443 wss://streaming.mypurecloud.de wss://collection.decibelinsight.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: blob:; style-src 'unsafe-inline' 'self' https: blob:; media-src 'unsafe-inline' 'self' https: blob:\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: microphone=(),camera=()\r\nlast-modified: Thu, 16 Jul 2026 12:32:58 GMT\r\netag: \"3c2-656b9a3d92385-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 440\r\ncontent-type: image/svg+xml\r\nexpires: Wed, 19 Aug 2026 13:37:01 GMT\r\ndate: Wed, 12 Aug 2026 13:37:01 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=604800, stale-while-revalidate=86400\r\nx-akamai-cache: Hit from child\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":962,"size_decoded":1509,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532ab610b8d23e1a76fe835ea38d3f64","sha1":"bb8143056f80f377663a6c2f760e2ba5cd8ba7b9","sha256":"328777be6ed92ae88755009a974a1283abf795957a3df244576ed70f5de4e9c3","sha512":"39464441fe97ae1bab7b9c6f0a079eaceedf401d228cb2f84747d76ded304f82c561672224f6d8325f751a088cf7e74e4b2241c21931f92a647a7b05cab00de9","ssdeep":"","tlshash":"1b11ec5892f4f6769907c7f48f7c957420ea10d441e98b5cace323101354abbe0bedda","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-12T13:37:37.477248Z","times_seen":2749,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":15,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-mediahub.dpdhl-brands.com/assets/eb840842-7f29-45fd-8faa-2cf235a9a727/preview.jpeg","fqdn":"assets-mediahub.dpdhl-brands.com","domain":"dpdhl-brands.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://digitech.pk/dhl/dhl/","date":"2026-08-12T13:37:01.946Z","timestamp":1786541821946,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /assets/eb840842-7f29-45fd-8faa-2cf235a9a727/preview.jpeg HTTP/1.1\r\nHost: assets-mediahub.dpdhl-brands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://digitech.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydhl.express.dhl/etc/designs/dhl/favicon.gif","fqdn":"mydhl.express.dhl","domain":"express.dhl","tld":"dhl"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://digitech.pk/dhl/dhl/","date":"2026-08-12T13:37:02.088Z","timestamp":1786541822088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mydhl.express.dhl","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5D:55:A7:38:40:8F:F1:BB:D4:15:D3:72:DA:0B:CA:09:5F:F0:AD:63","sha256":"71:91:86:59:51:A7:D1:D0:44:F0:01:B6:74:48:59:F0:6B:BF:C8:8A:1F:74:E8:FF:C7:3C:FF:A3:98:19:64:6E"}}},"request":{"raw":"GET /etc/designs/dhl/favicon.gif HTTP/1.1\r\nHost: mydhl.express.dhl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://digitech.pk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/gif\r\ncontent-length: 2889\r\ncontent-disposition: attachment\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Aug 2026 23:00:03 GMT\r\netag: \"b49-6587cf6fa7f19\"\r\naccept-ranges: bytes\r\ncache-control: max-age=10800, public\r\nexpires: Mon, 10 Aug 2026 18:46:54 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.dhl.com   https://*.decibelinsight.net https://*.decibel.com ws: https: http: blob:\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\ndate: Wed, 12 Aug 2026 13:37:02 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1786541822097_1600457623_162362328_72_19048_1_4_21\";dur=1\r\nx-akamai-tls: tls1.2\r\nakamai-grn: 0.970b655f.1786541822.9ad73d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2889,"size_decoded":3708,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"b66841dd3879d6db277b9b8547d7c630","sha1":"59c55652a9766e5331252f43d343ed4b96810f90","sha256":"365974fed7f1fa7bb42b2e309fb01e68a1954d479f841a67b4d6081336992899","sha512":"fa555cbc15588cc06e3f663852cabf0065160aebcd3eb1b03d4f701f6e155d29099ce456385e175ba5698423fc4ad5889897ac1581703c6877563f8d9dded6f9","ssdeep":"","tlshash":"17515d4b4093fa84fb52e13522f582d81fe56b8903e40a6e392af4d1b10d3f67ce0253","first_seen":"2024-05-05T20:07:23Z","last_seen":"2026-08-12T20:53:07.218595Z","times_seen":1315,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":11,"connect":1,"send":0,"wait":37,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
