{"report_id":"9184bf1a-3417-424c-8115-82d68598b28d","version":0,"status":"done","tags":[],"date":"2026-07-17T08:42:21Z","url":{"schema":"http","addr":"docusignlogin.globalexshipping.com/docusign.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"title":"Microsoft Store - Mozilla Firefox","dom":{"size":59401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14981)","md5":"5d62b1a8a98126f86ed01d0f39566ea8","sha1":"ff4df37dff6c4d4d64cf39499afd6cc0a8733bd6","sha256":"3bda65334de94b84f3e6aad279e474790147edf6db35241c4c65522a106c6412","sha512":"0cc5e6307f1e350354a4e95a820896b67c71a2fa475d4e6b059ab53eb415fe23654de94872b36559b57518f9ae2e6188ada91aa4adb5b4ea2aa4b80d5e54c420","ssdeep":"1536:Ehoxxco276aATPxgd0V5xUStgAusoMCp0RBrQ1prGeH:EhoNUioP","tlshash":"5a430b7e72f410bb2c53c1f5e62ea61e7a10e583dd376559b18d82009f8bd99ccb7188","dom_hash":"domhashcb895fe8f11258d6e961edcfe02f7879","first_seen":"2026-07-16T17:00:56.853708Z","last_seen":"2026-07-17T11:59:01.826989Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"docusignlogin.globalexshipping.com/docusign.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:42:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"docusignlogin.globalexshipping.com","ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-25","domain_rank":0,"first_seen":"2026-07-16T17:00:50.970206Z","last_seen":"2026-07-16T17:00:50.970206Z","alert_count":35,"request_count":7,"received_data":99369,"sent_data":4422,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-07-13T15:17:33.924461Z","alert_count":0,"request_count":7,"received_data":45808,"sent_data":4583,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"logos-world.net","ip":{"addr":"104.26.3.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-12-26","domain_rank":58048,"first_seen":"2020-05-07T08:26:23Z","last_seen":"2026-07-16T17:00:51.715181Z","alert_count":0,"request_count":1,"received_data":14148,"sent_data":594,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-13T08:19:52.745508Z","alert_count":0,"request_count":2,"received_data":408697,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"commons.wikimedia.org","ip":{"addr":"185.15.59.224","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":705,"first_seen":"2012-06-02T06:43:34Z","last_seen":"2026-07-12T18:29:03.947361Z","alert_count":0,"request_count":2,"received_data":2878,"sent_data":1371,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"6aee26cc7d7e619890ae054dbe83fe9a","sha1":"e18826fd0d2f85c905047e46ced0a415a4f8833d","sha256":"44b15fe5f4391f534439d3eaa04bafe2192b5b4ad542047e4ea6385cba03f79a","sha512":"578a3aec230986932a1aadebd321c093b70d79e9f9a8fb7982e84b9cf28c5da2524a7b448693ae8d76086c2a0fcffd1f55d657f870f8dea41473d36250bb44b0","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":2529,"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/process.php?proxy=1\u0026url=local%3A%2F%2Fembedded","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"archive":[{"path":"MozillaFirefoxInstaller.vbs","filename":"MozillaFirefoxInstaller.vbs","modified":"2026-07-17T10:42:06Z","Modified":"","magic":"ASCII text","size":5769,"md5":"9d3bb42d996476bd1e672b9bc6a6d88e","sha1":"32c3fcba26dffa5f104a3971abb025590b929628","sha256":"3b8a7cc700fea2ff432c0bd4db907187d4b5f5e4f6096ab21a7c71d926c87921","sha512":"9483454cbe382d34b0c0d43019a0f0b3c15828b60d1cbfe26481b7b008c50cc17ed818765ed5de3af3b98014eb7efb0a0374d88c769df88acf01303ec207a7cc","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/docusign.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a74e9486aae177fd2de420f2c01c200","sha1":"0f24964a5159bdcc32c9ce0db3b6634d02ad6e5a","sha256":"22b495f11ba9016cf233ae1d93145355a61ee6058720bd327ed0b74ac75ae37f","sha512":"6e9dd64cbfe744e65f15bd7af8c8045adf8e37ee34cc13557f0cbc580d2cb8f1b8fdfdcfa5108490f7eceb0dd36b5a5ad4ced35dd87aa79de57274151d7b4acf","ssdeep":"192:xs7SvmOMm6pRt21TU221/sdkmvXviJzqjisM+:xqSvmlmguk1Wv6m","tlshash":"dd02cfe7f5bfb0120992647c06af8204b66ea403364ac587bf6e4550ffc19d8c177ae9","size":8221,"data":"","first_seen":"2026-07-16T17:00:56.908568Z","last_seen":"2026-07-17T11:59:01.855129Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T00:55:37.560911Z","times_seen":48841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6e205590be9fcc2501d4941f519ae43","sha1":"e66d09f8881544a172f117861c263cab8cf02ce9","sha256":"47fd8ecf33cfc8edc959ea80515b24ea8a5c4f93fa9860b21fb221e3085a48f2","sha512":"6eb1187007d3a6b1fe4b27978c077ad2a276a52db47b91d5c1d4d6bc07dee5aa069f6309b0a4c279093c510a00a3707ef4b70b9df4d6553bf3aa945cd58974aa","ssdeep":"768:h7hUaATPxgd0V5xUSI+gAusoMCp0RBrQhnp47AGesZ:h76aATPxgd0V5xUStgAusoMCp0RBrQ1K","tlshash":"bfc2a4bf71bc31a6190342b4562f961e3a609503ad67be68b29e8358df4dc5cd0be1cc","size":26752,"data":"","first_seen":"2026-07-16T17:00:56.910299Z","last_seen":"2026-07-17T11:59:01.85676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711},{"level":"log","text":"Install button listener attached","filename":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","line_number":764,"column_number":13},{"level":"log","text":"Auto-install starting...","filename":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","line_number":566,"column_number":11},{"level":"log","text":"Triggering download...","filename":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","line_number":517,"column_number":11},{"level":"log","text":"Download URL:https://docusignlogin.globalexshipping.com/process.php?proxy=1\u0026url=local%3A%2F%2Fembedded","filename":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","line_number":536,"column_number":13},{"level":"log","text":"Auto-install complete, popup shown","filename":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","line_number":585,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/process.php?proxy=1\u0026url=local%3A%2F%2Fembedded","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:42:06.878Z","timestamp":1784277726878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"GET /process.php?proxy=1\u0026url=local%3A%2F%2Fembedded HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/zip\r\ncontent-disposition: attachment; filename=\"MozillaFirefoxInstaller.zip\"\r\ncache-control: no-store\r\nx-content-type-options: nosniff\r\ncontent-length: 2529\r\ndate: Fri, 17 Jul 2026 08:42:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2529,"size_decoded":433,"mime_type":"application/zip","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"6aee26cc7d7e619890ae054dbe83fe9a","sha1":"e18826fd0d2f85c905047e46ced0a415a4f8833d","sha256":"44b15fe5f4391f534439d3eaa04bafe2192b5b4ad542047e4ea6385cba03f79a","sha512":"578a3aec230986932a1aadebd321c093b70d79e9f9a8fb7982e84b9cf28c5da2524a7b448693ae8d76086c2a0fcffd1f55d657f870f8dea41473d36250bb44b0","ssdeep":"","tlshash":"d3515a4a00b722bae8b89975181980493ae3c28111d4fc7e0a2f0ddba0083b668372f3","first_seen":"2026-07-17T08:42:24.786939Z","last_seen":"2026-07-17T08:42:24.786939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/large.png","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/docusign.php","date":"2026-07-17T08:41:55.159Z","timestamp":1784277715159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"GET /large.png HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/docusign.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 08:41:55 GMT\r\netag: \"9d15-6a49b546-2789c2;;;\"\r\nlast-modified: Sun, 05 Jul 2026 01:37:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 40213\r\naccept-ranges: bytes\r\ndate: Fri, 17 Jul 2026 08:41:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40213,"size_decoded":40690,"mime_type":"image/png","magic":"PNG image data, 770 x 1024, 8-bit colormap, non-interlaced","md5":"301182187ffa81a52108334cf381527a","sha1":"ef8ac695705bb8614bf73203df3d5d109af92614","sha256":"8cab8ea3ee389c6e5a74bf1a66785f8b37537c4000d904e1c5d2f01781999794","sha512":"5b42dc9e59e7dda67ed5a6ff70814ab210b3765f92acc058abda3f8388d8ce3d9562532dad797d5d0314cc00440b4ea16a498fb948f7c9558877a709a05cba7d","ssdeep":"768:JMBJODRlnb+n6N5hNZV/h8XzB3p/P4h7UyqvAu+XagWdCsQa0TqdcDfdYWA/r:JMn+Rlnb9HhxungqvAu+qDb0TN5w/r","tlshash":"3d03e28bf2b510ceddc326b3a4007f5b07f8b50fed25519c6d29b20a881d1b5c5b932a","first_seen":"2026-07-16T17:00:56.886659Z","last_seen":"2026-07-17T11:59:01.84134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/9d/Brave_Lion_Logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.347Z","timestamp":1784277724347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/9/9d/Brave_Lion_Logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 86\r\ndate: Fri, 17 Jul 2026 08:42:04 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\nage: 0\r\nx-cache: cp3077 miss, cp3077 miss\r\nx-cache-status: miss\r\nserver-timing: cache;desc=\"miss\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=HLM1KF-fhHRWE0ac4Sv0sgOgAAAAAFvd3MFp5D1eQlZDOVBJc75mvwcgCAcO152Q;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\nx-request-id: 5f412963-b033-4cc5-947a-090232ebb38e\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/process.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:06.341Z","timestamp":1784277726341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"POST /process.php HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732\r\nContent-Type: application/json\r\nContent-Length: 39\r\nOrigin: https://docusignlogin.globalexshipping.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"{\"action\":\"download\",\"t\":1784277726339}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 155\r\ndate: Fri, 17 Jul 2026 08:42:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153,"size_decoded":616,"mime_type":"application/json","magic":"JSON text data","md5":"8256e971c1a8fd46716caf4d471be6a5","sha1":"88d65366319e078cc93b5be22282991280769437","sha256":"608d89d84c6123a874cc4160f82a0abdfdf6a477a81176b8d680b4bcc4d4b362","sha512":"248f4c99496a8825edf7da2913e4ec7ca58b3bc123ce86683e47acd20a72393ce6f2da50cc8695a6e913b91626a34ee57a7f2496b240c8ca81997e3789bb5837","ssdeep":"","tlshash":"bfc08c1283ae249a8ec42ac4a8ac3e4528ea0a132609d966902c80066d2132e702f2df","first_seen":"2026-07-16T17:00:56.875602Z","last_seen":"2026-07-17T11:59:01.845299Z","times_seen":4,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/e/e1/Google_Chrome_icon_%28February_2022%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.345Z","timestamp":1784277724345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/e/e1/Google_Chrome_icon_%28February_2022%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 1vc2zybkk5xibh4d60xopyi02w7gcdh\r\nlast-modified: Sun, 15 Oct 2023 14:21:40 GMT\r\ndate: Thu, 16 Jul 2026 14:08:44 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/e82c3cd8c7349ab13088920527e4d317\r\ncontent-encoding: gzip\r\nage: 66799\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/162\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=-BITOiPbbYku1QpqFkj8ZwOgAAAAAFvdLxfM5x5QlDwtblTPStJ3h8oAaKJ3fUIA;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 595\r\nx-request-id: d4b6a05f-a009-44af-a555-74c48a869dbc\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1429,"size_decoded":2738,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e82c3cd8c7349ab13088920527e4d317","sha1":"100330f83afe9649a4c8d76e3d6bf36a127ba9a5","sha256":"2bb1a2c9b9ae4d36f62ea53811554636cf3c5b74d9845e1dbacca0ce62dc7880","sha512":"5aae5adbd5e452bc73c09672039ba2aa78cf6cdf5f562ec0100e73235e125680ec8801a09024ab0c30a3d81287e49ffd391df83a30a163717e8708431134501f","ssdeep":"","tlshash":"df21e0f7d90ded97c106c7accda05175223e12abf6848355bfa5db5f28240d3142cba4","first_seen":"2023-05-11T13:59:56Z","last_seen":"2026-08-09T12:11:53.246236Z","times_seen":493,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logos-world.net/wp-content/uploads/2024/05/DocuSign-Symbol.png","fqdn":"logos-world.net","domain":"logos-world.net","tld":"net"},"ip":{"addr":"104.26.3.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/docusign.php","date":"2026-07-17T08:41:55.166Z","timestamp":1784277715166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logos-world.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 13:02:53 GMT","end":"Sun, 06 Sep 2026 14:02:51 GMT"},"fingerprint":{"sha1":"3C:6E:9C:B4:22:B1:3B:21:6C:75:4A:53:D8:11:F9:AF:AC:B6:65:21","sha256":"00:01:31:13:10:AC:65:67:21:C2:BC:EC:20:04:82:C4:63:A9:1B:B6:E7:9B:A7:A8:D4:A3:51:DF:26:FB:57:2C"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/DocuSign-Symbol.png HTTP/1.1\r\nHost: logos-world.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:41:55 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 29 May 2024 13:37:50 GMT\r\netag: W/\"66572fae-346c\"\r\nexpires: Fri, 13 Aug 2027 13:34:24 GMT\r\ncache-control: max-age=34560000\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 673650\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KY4AL4%2BRewAnbvE5BwnO80Z7GNoB5CVDzdrH5pw1bI1K%2BKGtqhJ%2F2lvf8zZ3a82qjW3NVy5WLIW9ZoqqbAvGixCNj35GcqEiI6CBY7fPVCbvVCX0CWIqdosAQ3dwDvHTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7f347ff5f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13420,"size_decoded":10159,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"d89e92b1d318b17ee505176999b066f7","sha1":"3cfb2198fa4e98c265566cc5b64ac65e01d54e8c","sha256":"03286aec05c61988f02d0240ff1bf3e103f2fd0dd2175e4747f0a23ccb0a27ef","sha512":"4f460e97ef7a20f5eb7be1850d3c09627d34a1cbd240d99b654e1bbd8a41e13401554bb0fd4d97cb14a008f58d0e51b5c737f33ebe251aceb53c1c61d8c36605","ssdeep":"384:eBeSw9Tcf71xZIWL+Jk10wwhZ+JQ04x9owPq4Ju:+YTcf7XZV30w2ur4xPid","tlshash":"e3525bcbaf74d1b5f46462ff4340760542fc14effa91f24bd184926261ab50db142a1f","first_seen":"2025-06-17T10:10:56.774817Z","last_seen":"2026-08-03T19:33:23.765246Z","times_seen":9,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/open.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://docusignlogin.globalexshipping.com/docusign.php","date":"2026-07-17T08:41:55.177Z","timestamp":1784277715177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"POST /open.php HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docusignlogin.globalexshipping.com/docusign.php\r\nContent-Type: application/json\r\nContent-Length: 175\r\nOrigin: https://docusignlogin.globalexshipping.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"timestamp\":1784277714908,\"browser\":\"Mozilla Firefox 134\",\"os\":\"Windows 10/11\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 75\r\ndate: Fri, 17 Jul 2026 08:41:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57,"size_decoded":535,"mime_type":"application/json","magic":"JSON text data","md5":"b36abe2c06294d3e88e37eb9527c67aa","sha1":"385b488a1d49d7f34e3e8003fbc285459acaf343","sha256":"c235d7b7922167ee25b1ec5c38dcda0b79b5b76af083d4b94689f1c10d8fd930","sha512":"e74f0814e345deea82819f2d360bb55273c2c7b8832929f445cc0327e40bae81ef721bc4c912c174e2596d934a0f3de1fbb7f25e29e3609cb4d78b26bf407971","ssdeep":"","tlshash":"0890026b034138d917521663b166546126b38448d7812015954a001c5a5568471f7546","first_seen":"2026-03-14T17:21:38.234776Z","last_seen":"2026-07-17T11:59:01.84857Z","times_seen":8,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/favicon.ico","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/docusign.php","date":"2026-07-17T08:41:55.331Z","timestamp":1784277715331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/docusign.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\ndate: Fri, 17 Jul 2026 08:41:55 GMT\r\nserver: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":1095,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-11T19:17:56.789998Z","times_seen":43385,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:03.986Z","timestamp":1784277723986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:42:03 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3131095\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5nAP7FwPFAaZIUMkxAuclB2RQAiMOrNzHdjBgw2VHiaYNf8U3xS4sfyiV3s5jmzFvXiWODzwFyo1BPkNo7XxTUjpEtV1l7UckTOgXFlNEv3kjR41CTsDePaNikd1hwwLL%2FN9rI%3D\"}]}\r\ncf-ray: a1c7f37eef8e569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127116,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T00:55:37.560911Z","times_seen":48841,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commons.wikimedia.org/wiki/Special:Redirect/file/Microsoft_logo_(2012).svg","fqdn":"commons.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.224","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.432Z","timestamp":1784277724432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wikipedia.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 20:06:44 GMT","end":"Fri, 04 Sep 2026 20:06:43 GMT"},"fingerprint":{"sha1":"7E:17:EE:14:93:5B:A5:03:8D:D1:2B:75:C3:57:A4:59:D8:A0:87:EB","sha256":"06:1E:79:90:41:7D:68:1C:3D:13:6B:CE:AC:CF:8A:3D:F7:0B:F0:02:B8:61:81:AE:0A:AC:1B:5F:2D:A0:9D:21"}}},"request":{"raw":"GET /wiki/Special:Redirect/file/Microsoft_logo_(2012).svg HTTP/1.1\r\nHost: commons.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: WMF-Last-Access=17-Jul-2026; GeoIP=NO:::59.95:10.75:v4; NetworkProbeLimit=0.001; WMF-Uniq=0-EY3wYbq4olVEfkyV-vqwOgAAAAAFvdX7gnf_ghcEyjix0KcOv-bMXiv48TPqJo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Fri, 17 Jul 2026 08:42:04 GMT\r\nserver: mw-web.eqiad.main-7c544f8b79-dq95g\r\nx-content-type-options: nosniff\r\naccept-ch: \r\nlast-modified: Fri, 17 Jul 2026 08:42:04 GMT\r\nlocation: https://upload.wikimedia.org/wikipedia/commons/9/96/Microsoft_logo_%282012%29.svg\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nx-cache: cp3072 miss, cp3072 miss\r\nx-cache-status: miss\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\ncache-control: private, s-maxage=0, max-age=0, must-revalidate, no-transform\r\nvary: Accept-Encoding,X-Forwarded-Proto,Cookie,Authorization,User-Agent\r\nset-cookie: WMF-Uniq=0-EY3wYbq4olVEfkyV-vqwOgAAEBAFvdh-wCUJSeNUXGCpykd5lDTHrjQGf8Tup7;Domain=commons.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\nx-request-id: e8162afc-77e6-4734-bf29-e6f89cd5f661\r\nx-analytics: \r\nserver-timing: cache;desc=\"miss\", host;desc=\"cp3072\";co_id;desc=\"1440497452\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/96/Microsoft_logo_%282012%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.616Z","timestamp":1784277724616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/9/96/Microsoft_logo_%282012%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GeoIP=NO:::59.95:10.75:v4; WMF-Uniq=HLM1KF-fhHRWE0ac4Sv0sgOgAAAAAFvd3MFp5D1eQlZDOVBJc75mvwcgCAcO152Q\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 9cva4msxe55k79yede8c84rnvpyy053\r\nlast-modified: Tue, 21 Feb 2023 16:09:17 GMT\r\ndate: Thu, 16 Jul 2026 14:07:55 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/84e661e792967c393da599b81ef41dc8\r\ncontent-encoding: gzip\r\nage: 66849\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/486\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=HLM1KF-fhHRWE0ac4Sv0sgOgAAEBAFvd7JafVy2SJp8_2UF4SJp7t9WUP2vf_Z4S;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 1335\r\nx-request-id: 6b3e0ec7-17d8-4561-b227-7c7518e62291\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":3163,"size_decoded":3479,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84e661e792967c393da599b81ef41dc8","sha1":"501b90ab65c9f9f9b37ee2e938f77ae0e59f4b37","sha256":"34ec1619e4a62515d67c5240fe5762ef5a1838fe67d2fb1fb0b001099cebf1db","sha512":"b732e81f507dd02fba66cc6c3b2b070f30efaf6cbca8b91ee9ff9a37ee07f0666907c7b87a9fc7ffd576b5df57351ecd987415d7e3b4d7ce1e1946ec109de827","ssdeep":"","tlshash":"84517a1b4308d7a9eee8456cac64284975d4fe86e4b4f1c0bf6b440ae09c4f8f55cbad","first_seen":"2023-10-22T17:44:16Z","last_seen":"2026-08-09T19:33:20.792309Z","times_seen":156,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/docusign.php","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:41:54.447Z","timestamp":1784277714447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"GET /docusign.php HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 5155\r\ndate: Fri, 17 Jul 2026 08:41:54 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21084,"size_decoded":5533,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9fb95bfc9b296840437fabcac5f2e3d3","sha1":"c147bbbf1370921697c1db4276d67f32f6ae6f5d","sha256":"3c13590a882ec9a2610968fb2aa5f82391fbfbb2be52c754ebb6871bcff1c7ba","sha512":"7a60bb0778ef99ebc158a4d78d454deb315aa7b090a21e15da7e93ef3b4983514604a6ee8244a3e7a2d51f3228ebeb839f66d8fcdf9e7b261653772a63026dbc","ssdeep":"384:ZIQ5A2W8pLgjUiTRFBC9i4qSvmlmguk1Wv6j:OsRW8pLgjUiTRFcbqzlmguKdj","tlshash":"e59296a6b5ff6002545390a827eb9308377aa003e24ac90b7fad5690ef819d5dd737d8","first_seen":"2026-07-16T17:00:56.878993Z","last_seen":"2026-07-17T11:59:01.829226Z","times_seen":4,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":53,"connect":23,"send":0,"wait":82,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.343Z","timestamp":1784277724343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/9/98/Microsoft_Edge_logo_%282019%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: qvr9g69y5obrs52y2bz2ah3awxb8j4r\r\nlast-modified: Sun, 29 Oct 2023 00:26:05 GMT\r\ndate: Thu, 16 Jul 2026 14:09:06 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/22e028c10766d6b06bf71e22c4b03a10\r\ncontent-encoding: gzip\r\nage: 66778\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/129\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=XGq5QDhqz7NarEVA62i12wOgAAAAAFvd8U0Zt25FKrbbWByxggsgwhtxxDhlluhd;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 1036\r\nx-request-id: c0e72ad5-b51a-4240-93bb-696f3239c9b7\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3814,"size_decoded":3180,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22e028c10766d6b06bf71e22c4b03a10","sha1":"e62225ca8f64ceb4746cf45423f5884cf7e6a1db","sha256":"228f22cc4bf1603374f4a51ccf824377adc04aa0123aed741f32cd5f0899ed81","sha512":"c67ae6f0736fac5ff021176ae95773b9fa1d042745fda5320159c28c8c071b7ce50d1f6b43c8637f2d2516b3a902dc5b8bd6ca6087dce665ff46ae4073276534","ssdeep":"","tlshash":"5a71dd7dd21855bed4abc3bcdae18470331d916e70c0832ae57c8b3a54a44c798efb91","first_seen":"2025-04-11T12:18:38.120739Z","last_seen":"2026-08-05T03:01:03.120716Z","times_seen":61,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":24,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/a/a0/Firefox_logo%2C_2019.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.710Z","timestamp":1784277724710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/a/a0/Firefox_logo%2C_2019.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4; WMF-Uniq=XGq5QDhqz7NarEVA62i12wOgAAAAAFvd8U0Zt25FKrbbWByxggsgwhtxxDhlluhd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 7pdu6i5qtg19024vujbftdqgd5brnwb\r\nlast-modified: Tue, 01 Apr 2025 13:08:11 GMT\r\ndate: Thu, 16 Jul 2026 14:06:35 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/be711e8f435276ca1ac54ae802b87f43\r\ncontent-encoding: gzip\r\nage: 66928\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/157\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=XGq5QDhqz7NarEVA62i12wOgAAEBAFvdWSrE7aN7Uu78J3CoMA4fcz-lxjCMnPTk;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 2796\r\nx-request-id: 3ab2881e-7317-4f8e-859e-b41b8b4b5f69\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":10472,"size_decoded":4940,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be711e8f435276ca1ac54ae802b87f43","sha1":"41f653895f6666c275a04707e29e734ac2c8a0bb","sha256":"f31b10673f2e62510a18cb79c32555d88aa806ede13b128e3e7e3072bfc05cbc","sha512":"e31d5cce1a5b2d181d31192ed41abbc1806c69c9a572833c00d2769a68b552d22c1219b1130fd94f866f12c64bc60ae435376a472960c827cf52efd405ebcabb","ssdeep":"192:paw7V7QhJn74Unyvb+K1+KyXo7GABZOxPuIPZdV8:paw7V0hJncUnyvbr1rxBKBRdV8","tlshash":"3a22958dd73861fad8cfd36dd71684ec350e509b76e18a58c76acf0e648248bae48f44","first_seen":"2025-06-02T12:18:23.11612Z","last_seen":"2026-08-09T21:13:27.685009Z","times_seen":41,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/4/49/Opera_2015_icon.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.349Z","timestamp":1784277724349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/4/49/Opera_2015_icon.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: hvcsdx8iz84sah9ae8u05n0lvl79rqb\r\nlast-modified: Thu, 25 Mar 2021 22:00:19 GMT\r\ndate: Thu, 16 Jul 2026 14:30:44 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/f82b3d4aea497f577902b97c635d1543\r\ncontent-encoding: gzip\r\nage: 65480\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/22\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=Hr0SVPC3wIdWxQT4olp0nwOgAAAAAFvdVzBXVszwvQKnFemIlAhEWm0JOSimm93P;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 757\r\nx-request-id: 38f709cf-bfc9-4f5a-9179-546ba800fcc3\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1677,"size_decoded":2899,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f82b3d4aea497f577902b97c635d1543","sha1":"98fd873229a098f2e34148dcc5776f9ddc53ffa3","sha256":"75a7effb1bb83748023b53e8c0ad949291904108ad3172177d978f48ab869188","sha512":"fe5fc43b300c239f2d2a231d776ed8c1ad5bd2dc14b4d1f598ccac1fe5ce870b952b35b59c873104a5c7808a592fe31839ea5fd6b7cae94c3d1f2c18194d87fc","ssdeep":"","tlshash":"aa3132afe3a0e4bde18bd704dbb54c24655ca8767ac0c240c1f5ee5e44724c61c8cbb0","first_seen":"2025-11-14T10:16:02.01304Z","last_seen":"2026-07-21T23:52:16.649133Z","times_seen":19,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","fqdn":"docusignlogin.globalexshipping.com","domain":"globalexshipping.com","tld":"com"},"ip":{"addr":"167.86.82.141","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:42:03.872Z","timestamp":1784277723872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docusignlogin.globalexshipping.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 10:53:10 GMT","end":"Wed, 07 Oct 2026 10:53:09 GMT"},"fingerprint":{"sha1":"9D:24:90:45:E1:4C:28:BD:E1:F6:2C:B1:C9:9F:A9:78:B5:E6:9B:BD","sha256":"E4:0E:53:5A:D7:04:D5:E0:D0:E1:8D:8A:8E:29:FB:0A:F8:61:64:66:D2:FF:49:AB:1E:29:BC:47:B3:09:9D:6A"}}},"request":{"raw":"GET /microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732 HTTP/1.1\r\nHost: docusignlogin.globalexshipping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/docusign.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 8692\r\ndate: Fri, 17 Jul 2026 08:42:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":31133,"size_decoded":9050,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (374), with CRLF line terminators","md5":"dcf134707caba891b5ec330d6977978a","sha1":"29aa963b3da3999f7d78cd5bd854630cafc47179","sha256":"a68459c9fa27806a6dbabf79fb3d6c709aaffa0b1d981069435829e8e5503a1c","sha512":"005bbbd2f3b7f794c8a15b4e1491fd1703632c98316345cd4854d9c1df163dd3760956e02a454d6aad0229005959d49931ce118f4b769c4f57a3d9e02f3e45cf","ssdeep":"768:x4Lvbpa3o2yTjVGhK1y+xO0y+cQ0AYqAt6trFSFrnPAFa:QDpa3o2yTjVGhK1y+xO0jcQ0AYqAt6tG","tlshash":"efe2b6beb19824665d7383b496329f1dfa508303da134a1bb1be9359af72d50c19f8cc","first_seen":"2026-07-16T17:00:56.890065Z","last_seen":"2026-07-17T11:59:01.843793Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"docusignlogin.globalexshipping.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"docusignlogin.globalexshipping.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:03.951Z","timestamp":1784277723951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 17 Jul 2026 08:42:03 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::z56zr-1784277513198-85170255e1dc\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 210\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkCL7Z5NGiS5Jpd2%2FbcWchxLEmQL5kD%2Fj7vlQHpxNxJJAgKk9bVqTjAczhyY4TaqzLcrNK5zP0GPAdJRaIUBCWd%2FZw0kshI1vwqWfM47rzE5jR4FlPs6Aixxlvpr2OoMwE2xXt0%3D\"}]}\r\ncf-ray: a1c7f37edf79569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":8,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commons.wikimedia.org/wiki/Special:FilePath/Microsoft_logo_(2012).svg","fqdn":"commons.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.224","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:03.957Z","timestamp":1784277723957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wikipedia.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 20:06:44 GMT","end":"Fri, 04 Sep 2026 20:06:43 GMT"},"fingerprint":{"sha1":"7E:17:EE:14:93:5B:A5:03:8D:D1:2B:75:C3:57:A4:59:D8:A0:87:EB","sha256":"06:1E:79:90:41:7D:68:1C:3D:13:6B:CE:AC:CF:8A:3D:F7:0B:F0:02:B8:61:81:AE:0A:AC:1B:5F:2D:A0:9D:21"}}},"request":{"raw":"GET /wiki/Special:FilePath/Microsoft_logo_(2012).svg HTTP/1.1\r\nHost: commons.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 17 Jul 2026 08:42:04 GMT\r\nserver: mw-web.eqiad.main-7c544f8b79-xt8n8\r\nx-content-type-options: nosniff\r\naccept-ch: \r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nlocation: https://commons.wikimedia.org/wiki/Special:Redirect/file/Microsoft_logo_(2012).svg\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nx-cache: cp3072 miss, cp3072 pass\r\nx-cache-status: pass\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\ncache-control: private, s-maxage=0, max-age=0, must-revalidate, no-transform\r\nvary: Accept-Encoding,X-Forwarded-Proto,Cookie,Authorization,User-Agent\r\nset-cookie: WMF-Last-Access=17-Jul-2026;Path=/;HttpOnly;secure;Expires=Tue, 18 Aug 2026 00:00:00 GMT\nGeoIP=NO:::59.95:10.75:v4; Path=/; secure; Domain=.wikimedia.org\nNetworkProbeLimit=0.001;Path=/;Secure;SameSite=None;Max-Age=3600\nWMF-Uniq=0-EY3wYbq4olVEfkyV-vqwOgAAAAAFvdX7gnf_ghcEyjix0KcOv-bMXiv48TPqJo;Domain=commons.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\nx-request-id: 58a1ca48-22d7-476b-a7cd-dfb0b9458691\r\nx-analytics: \r\nserver-timing: cache;desc=\"pass\", host;desc=\"cp3072\";co_id;desc=\"1919045496\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":22,"dns":0,"connect":21,"send":0,"wait":119,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/a/a0/Firefox_logo%2C_2019.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docusignlogin.globalexshipping.com/microsoft-store.php?microsoft.com/hc/en/article?id=zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732-zm_kb\u0026sysparm_article=KB0060732","date":"2026-07-17T08:42:04.340Z","timestamp":1784277724340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/a/a0/Firefox_logo%2C_2019.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://docusignlogin.globalexshipping.com/\r\nCookie: GeoIP=NO:::59.95:10.75:v4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 7pdu6i5qtg19024vujbftdqgd5brnwb\r\nlast-modified: Tue, 01 Apr 2025 13:08:11 GMT\r\ndate: Thu, 16 Jul 2026 14:06:35 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: W/be711e8f435276ca1ac54ae802b87f43\r\ncontent-encoding: gzip\r\nage: 66928\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 miss, cp3077 hit/156\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=_UF8FLaKMRDhQIzb_pzd2wOgAAAAAFvd5ouFFm9lj9XSVYpptP6mefa1u6ike8Jz;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 17 Jul 2027 00:00:00 GMT\r\ncontent-length: 2796\r\nx-request-id: 3391ee1d-e0da-4d03-88e1-8aa9512cfd71\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10472,"size_decoded":4940,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be711e8f435276ca1ac54ae802b87f43","sha1":"41f653895f6666c275a04707e29e734ac2c8a0bb","sha256":"f31b10673f2e62510a18cb79c32555d88aa806ede13b128e3e7e3072bfc05cbc","sha512":"e31d5cce1a5b2d181d31192ed41abbc1806c69c9a572833c00d2769a68b552d22c1219b1130fd94f866f12c64bc60ae435376a472960c827cf52efd405ebcabb","ssdeep":"192:paw7V7QhJn74Unyvb+K1+KyXo7GABZOxPuIPZdV8:paw7V0hJncUnyvbr1rxBKBRdV8","tlshash":"3a22958dd73861fad8cfd36dd71684ec350e509b76e18a58c76acf0e648248bae48f44","first_seen":"2025-06-02T12:18:23.11612Z","last_seen":"2026-08-09T21:13:27.685009Z","times_seen":41,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":24,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}