Report Overview
Visitedpublic
2026-07-17 08:42:21
Tags
Submit Tags
URL
docusignlogin.globalexshipping.com/docusign.php
Finishing URL
docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb&sysparm_article=KB0060732-zm_kb&sysparm_article=KB0060732-zm_kb&sysparm_article=KB0060732
IP / ASN
167.86.82.141
Title
Microsoft Store - Mozilla Firefox
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
docusignlogin.globalexshipping.com 35 alert(s) on this Host | unknown | 2025-10-25 | 2026-07-16 | 2026-07-16 | 4.4 kB | 99 kB | 167.86.82.141 |   |
upload.wikimedia.org | 4329 | 2003-03-16 | 2012-05-21 | 2026-07-13 | 4.6 kB | 46 kB |  185.15.59.240 |  |
logos-world.net | 58048 | 2019-12-26 | 2020-05-07 | 2026-07-16 | 594 B | 14 kB |  104.26.3.6 |  |
cdn.tailwindcss.com | 117330 | 2017-07-20 | 2018-07-09 | 2026-07-13 | 974 B | 409 kB | 172.67.68.11 |  |
commons.wikimedia.org | 705 | 2003-03-16 | 2012-06-02 | 2026-07-12 | 1.4 kB | 2.9 kB | 185.15.59.224 |
LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.Tailwind CSS (UI frameworks)
Tailwind is a utility-first CSS framework.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | docusignlogin.globalexshipping.com | malicious | Sinkholed |
| DigiCert UltraDNS | docusignlogin.globalexshipping.com | malicious | Sinkholed |
| OpenDNS | docusignlogin.globalexshipping.com | phishing | Phishing Block |
| Hagezi Threat Feed | docusignlogin.globalexshipping.com | malicious | Sinkholed |
| Quad9 DNS | docusignlogin.globalexshipping.com | malicious | Sinkholed |
File detected
URL
docusignlogin.globalexshipping.com/process.php?proxy=1&url=local%3A%2F%2Fembedded
IP / ASN
167.86.82.141
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size2.5 kB (2529 bytes)
MD56aee26cc7d7e619890ae054dbe83fe9a
SHA1e18826fd0d2f85c905047e46ced0a415a4f8833d
Archive (1)
| Filename | MD5 | File type |
|---|---|---|
| MozillaFirefoxInstaller.vbs | 9d3bb42d996476bd1e672b9bc6a6d88e | ASCII text |
JavaScript (3)
No JavaScripts
HTTP Transactions (19)
| URL | IP | Response | Size |
|---|