{"report_id":"aef5c1fe-c663-4d97-b840-273a0f842787","version":0,"status":"done","tags":[],"date":"2026-07-04T12:20:53Z","url":{"schema":"http","addr":"globesourced.shop","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":0,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"title":"Global Sources","dom":{"size":12627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4830)","md5":"af22823ac3e9b341a2755d659d033410","sha1":"5db117843ac04893184fa1df1921efcc0ff2ed17","sha256":"6cc6318c2d04dc49e23a1bb75b34881027eb3e23d3fed155c2b0faf409c54f2b","sha512":"085244dcf7598906e33fbeaeb05ecabd8b4509da90fb142a83e6f0a391a102ae905348b108d5f20d65e7cee40bdc41aa05618b8512530e3d00486f38b9347e70","ssdeep":"384:SIc8WkVxmqoQ2gYOUlcAJbMVICrMefQwn0:LxmqoQ2TOUlLbxjeYJ","tlshash":"1342d6675c09882b4ee268c4f0b0ff3d64aac319ee11dcdc52fc529a63c5e8f985946d","dom_hash":"domhashc775903c5d79d9e0117e83fc073278b0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globesourced.shop","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":0,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T12:20:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"tmxapi.globalsources.com","ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"domain_registered":"1996-05-18","domain_rank":5195099,"first_seen":"2018-06-13T11:16:40Z","last_seen":"2026-06-21T13:24:07.363867Z","alert_count":0,"request_count":18,"received_data":938183,"sent_data":28218,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"analytics.analytics-egain.com","ip":{"addr":"54.171.163.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2012-06-05","domain_rank":218934,"first_seen":"2014-01-28T12:05:07Z","last_seen":"2026-06-27T07:20:49.328625Z","alert_count":0,"request_count":1,"received_data":139,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-06-28T22:45:38.558215Z","alert_count":0,"request_count":3,"received_data":66530,"sent_data":2354,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com.ng","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2009-05-13","domain_rank":150820,"first_seen":"2012-05-22T18:50:56Z","last_seen":"2026-06-25T18:02:31.980958Z","alert_count":0,"request_count":2,"received_data":1262,"sent_data":1887,"comment":"","tags":null,"fingerprints":null},{"fqdn":"globesourced.shop","ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":96,"request_count":32,"received_data":1137816,"sent_data":15108,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globesourced.shop/index_files/ssoscripts.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa083e182fd093cb8f5fa924348f39b0","sha1":"67270339d14bb7055a836056fbece8ac113503bf","sha256":"df86e5af01c80afb70fe6d93636b8e119e3f4293cf0686d61448ddf8e96339db","sha512":"85df9a09e1c841e0971ba51b6c4d92950bb993b6937bff343cd157873abb5ad80e59e035dcf66961a28bcda1c42b0682a6861ff71d526ba27283a4dc35e2cdf6","ssdeep":"768:96OzjmT9jVma49kFV0BEBF+oTPpwaQ/P82BoT6xlU0TClvO1eqdg1eqiNhR1Oztp:HzjC9x549kFV0BEBF+oTPpwaQ/P82BoX","tlshash":"720308c33290247a57f901e52daf0a0ab1bca9735f5498e4c1a4d8631634fc9b977ee8","size":40414,"data":"","first_seen":"2026-07-04T12:21:07.195815Z","last_seen":"2026-07-04T12:21:07.195815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/webtrends.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fd3014ac5399a5e6486deb7775e17a","sha1":"7dfe05ffaba0577861a89ac9c7e81f21663987c1","sha256":"bceccc4659416c72597c905dd9f17f9245ad9c0f1258147bfba31d9b29368f3d","sha512":"06578a0c14860ceedeb00720e8f96c2606fbd6409f93bdf3a656bbda27400c5d0773b7d38b86afda2ccaa7a20b86f0378f7cea789a40889f3962e791f1a938b7","ssdeep":"384:WJALDmPxIwqXRwdb/WftDRPUnclVgq1cGSO+8yhj9KAwOyIOb6/5LkOilp3qdUFg:WJALqw0etvFJA9rwxSOOOp6dkE+6ITdE","tlshash":"89b21a85b2e0313382b274e4042f634ab077b56aa8844cacf594f4e59d74f5a01bff79","size":24123,"data":"","first_seen":"2023-03-07T17:53:34Z","last_seen":"2026-07-04T12:21:07.207592Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/check.js?\u0026pageid=99998\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c87998a9e6b7b82c4b099867e176d3ee","sha1":"9fb61743f17b584691f86f25c67e7b4be2bcc6f9","sha256":"98f1ac98ecdf838449342d2c2fbf5280a6a039460add2f6cc4dca9ee76b1273b","sha512":"983d0c501567158f5f9caa95c1d29d5b86e45a7e738647e06b722baa14014b6b74ed3947ba05f144c75922119d7e8e96d64a16f4cead9d0be385af41bed5d624","ssdeep":"768:YPAdYCX/tVYT8A6Of1Afc/EUqTB3TPTJqTeEdSbak31pHGb+aKWp:YPAdYZT89K+3UqTB0ecSbaYHi+aKm","tlshash":"3724d0db0ec082a3d66f5e90271d1c8fa01c707f43a943a5d112bfe998b3b41e6de995","size":224599,"data":"","first_seen":"2026-07-04T12:21:07.164591Z","last_seen":"2026-07-04T12:21:07.164591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf9580a6d32c377b97f6ee0c7019b820","sha1":"f7be3c8c51117d8fa06ca4117f0666726e98c4ea","sha256":"d6dc5d1122989b23f8589ea672e5e1e06a01b9fa7b1fed3f6515990a3f7f51dd","sha512":"ed21486e4f785b651be44b1cef8f3fa0dc4de0e20f0b74f48542f2890b3f760e54d53c7e203c664dae7d5f9f7d3bfd3d3864d8ccbd1b22863355c1c0d08c7fdf","ssdeep":"","tlshash":"4cc02b4c0b0a2e415270c04eae86543298b005b4d27ca174300ae04407c400043d0e85","size":134,"data":"","first_seen":"2026-07-04T12:21:07.211252Z","last_seen":"2026-07-04T12:21:07.211252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"0af2c8b6b321c2cc65785b7205f51595","sha1":"b97b30336efd083426ee097348c38e6c607e8e1a","sha256":"e57de9d1d1b7400bf13d1d1be80bf53c7fc469fd5f6e8a10cdfc4c5622d482ab","sha512":"498e02acb32c2b8b109b33b14d22fe8abbda1321736da94cc009cf81cceff4050d8e2d0bb3a48c0bf05f9373097e0c863cb379b6427191843bbdad7707bad70d","ssdeep":"","tlshash":"1460000000030033000c000c0030c3c33f3000003003f030c30c000000f0c000003c00","size":14,"data":"","first_seen":"2023-04-10T16:42:27Z","last_seen":"2026-07-13T05:42:03.403259Z","times_seen":24230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/egain-chat.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4f3b41924f55bb8abf9b7a90ae5080b","sha1":"6364dfc609f34980dca9ada457b9cff73e9f611d","sha256":"0b612f32a5ea492a7975ed975b6470c279f280a04ac4de1d027afe1c1e5923bb","sha512":"99ab4d99e6bb32883835c35f0f4dbdfba86227fadac469855eb642cbe486a4969ab8a9e47e85b06977480ceb24546a65571f03e6070a7068a202472845a33a2a","ssdeep":"","tlshash":"7241edbb592853e2acd4305be1eaf6847870a068741195b1c6fcc438b1b4ec250abfec","size":2180,"data":"","first_seen":"2023-03-11T14:17:46Z","last_seen":"2026-07-04T12:21:07.169138Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/insight.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b7f1a92dd6719f87830997e69f3675","sha1":"a8bc777fd7187e3a56d5214a3bbddd95ec575ded","sha256":"5f3b103a1268f862a5e432d607f8e5220dea9d301d13565b0ecded3ad9c25ab2","sha512":"fdbbb5fb56922c71cbf877ca1cd901afd243342106303c85f3074868eef27ac1e0e6c0ab0a46961457c8441a2a2a1c75136977ff908edc68c59a3386117e7653","ssdeep":"96:LvleavwqOcvwM6kpL5CN6Cysim8jvuoHFmtXgM4nldI2XDzxp:Zvwkvw/8Ao7vjmtQ5lW2hp","tlshash":"ef91a6e47585f86587d77496437f345ab3baa300aced4890d40be0c02b74b9a91e2fb8","size":4322,"data":"","first_seen":"2023-03-07T16:45:52Z","last_seen":"2026-07-04T12:21:07.205275Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/conversion_async.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f6c3cc1f3f1bcb9fc012bf00a0be279","sha1":"61de16ae0d1d2ef75f228ca110e45ca525c2d1e4","sha256":"929ddedccdd40b8b9a474311266e6eaccc88e2136bbd20c47d571d341d173b29","sha512":"ea50e93c525deb9f0567bb2180717cbba59a4f119eee889d64068acbcb5816ff0504a55e6e349703ec8316b4d046d31b5bcffc47f257146f64bc87c081ba1465","ssdeep":"384:KKrS+J25CtSo56tjfa2X2G3LLa8059LrrtANLGakOSpjeeBMCw/DAruxjtDcJ1zE:DBRsrTa90LGakhtAxjtlOVCnD","tlshash":"d7f209cab641b06bc3a390a4113f490bf37e6a95a888d4d0d642d5c46d34bdd02b7fad","size":36916,"data":"","first_seen":"2026-07-04T12:21:07.1659Z","last_seen":"2026-07-04T12:21:07.1659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/rdvoqldvqhjbezvv267285.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5952fc7d09b0d8d2f667ffcf97a3af73","sha1":"c082576347a0215b7a2e6cad836cec94a1b43c97","sha256":"682bae34dd1c50a5dab84da95bffb8bcee237a97567561966441640af39cf94d","sha512":"3e2c1ab704816a277443e1d04e175b9e7ab73a23d59a47b8615b2a54e9df49b78a1b93f7bd8c0ef0e59d95324a11410ad6f51585ae2b8dd3d9cd49ceeaac3a96","ssdeep":"768:w58XBKp4IBnQdFL7MuPLc9TQLuck1jpuErIQidBnPSOSpf/SdSdSSD8uXgWDR33U:FBK2IBnIN7Mug9TQz","tlshash":"2f03e7ce33d2e417034f6073a9ab1d16b2379cb855096083e725f9ea74a1d2fd11aeb4","size":41020,"data":"","first_seen":"2026-07-04T12:21:07.159224Z","last_seen":"2026-07-04T12:21:07.159224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026fr","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a9eaa0c9fcb807d10a889e9e815fdc","sha1":"dd26c346e4a7b51fce2900203ade7b0ad5cbef80","sha256":"f77b7684ca0bb1f68a77b88b5381eb864fe749086802bc9da25436da99866026","sha512":"06cd8ffee6ca11330d4cb797618924a34860fd24bce35579e44b0b48fb6b90b9e64377bf7b3f892d754243d38b538e527bd47b11d4f8253684920b2671869914","ssdeep":"","tlshash":"f7c02bef1f64dfc18fc254c1900df134eaa47200e01cffa0243431c0587400c2290446","size":134,"data":"","first_seen":"2026-07-04T12:21:07.190639Z","last_seen":"2026-07-04T12:21:07.190639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b716fff984dca8183d5a0882478ea2b6","sha1":"91e15df313e6b71360cdb3ebcd9562327010c2f2","sha256":"3fce8ba9caa98b04302f09ee767006c76fdb5381efd13128ad0bb7326c687583","sha512":"e8b920511e200bb00f9dbb24628c7dbaf7ecf2eff3ee32358c914629f1b27a400192c59a826b2a64ca799fc56fa9ef1d871774fb732aa46020aca665df27b121","ssdeep":"","tlshash":"78600000c0cc0f30000030cc0c303c03000c3c000c3c0000fc0000000000c0fc0f0030","size":15,"data":"","first_seen":"2023-03-10T11:39:31Z","last_seen":"2026-07-05T01:04:14.44205Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/webtrends_002.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ea8b95abb8ab706e7a0cfa9685cd10","sha1":"8b75b0f6fff26a3a651d9346db02fefe45a67379","sha256":"fe11671e8ca6d3b5659e5dae0924ecae80c99c0dd72478710eed0886e687f69d","sha512":"c10e2134fbdcdda735e9eadb705e4f15712b0cdcae15a8fab0b745c1d5014d52932f79c4435bd331de72d1a5c5a337da8a39aaa580ad3dc3671c6417741e2af8","ssdeep":"96:ZnNFRdOYCKON8nBnN3xePBciKF1YD0VFjmls5EHOTxp1:5bfOYCz8nTtYD0VdmbIx/","tlshash":"e2e103a8158e913208fb615ceb75938afb7e53332557e023746ca65c5f30c338566eca","size":7382,"data":"","first_seen":"2025-01-04T16:53:03.253069Z","last_seen":"2026-07-04T12:21:07.194402Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/jqueryandplugins.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c6f74b0edf08f65d720d579b47425f9","sha1":"5944fabf9c52774f64bbe070083e598ce498a28c","sha256":"5ee7561a3a5c0bcfd620ab6004ff7cab8ee16c800aada8a165c32cd104086cd5","sha512":"316ad6010796ab23406ea24394e2939c17108a3472e9bd0af67f2ac632930b343e55d0216312bd71528d9e6444f02e6d38a15f7c73d0ba452df1a0214a94ebad","ssdeep":"1536:b5Ay3b2EZJSFVhY/fl8q/AJOfubEgcAK2exXd0XOGNA7cWPm2F2V3objtvN+mJmd:at3r13F65P32ujtvNj0","tlshash":"4aa31ad9f39774724b6b30b861bf110bb17768a5a81c84a0f064d8e4bc78a8d517bf2d","size":101169,"data":"","first_seen":"2023-03-07T17:53:34Z","last_seen":"2026-07-04T12:21:07.215758Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/egain_docked_chat.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1e4da9b914991b022ed31cca6e320b9","sha1":"e59644d42fa4bb245767c78349bcd4909497d4fe","sha256":"48bbe0df71c6d5a101831666c71c5a2909a8f6b53b71f5371bad3497161656a4","sha512":"e8fea4938cc241c350ff6e17f67bac9c5e7520fa1757bc50c482e6ea2f51206870d635f6c25ad9a6c0825cc226d0b01079d4f4c57c8950a2dde01addaab37d9f","ssdeep":"","tlshash":"6e31cdba1b7ce2e528700d5f545b5320a16898b0e384b7f3539bd89c249cd1d4467fcc","size":1590,"data":"","first_seen":"2026-07-04T12:21:07.191818Z","last_seen":"2026-07-04T12:21:07.191818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce3ddefdfa993eff10cce12bad0f161d","sha1":"f1455008ca9dcb80747f474d900994ec2cba7254","sha256":"5825930e400f3c0b303a930b890dd589e3fefeb58b7a2819919a0bfbd43a958f","sha512":"f4264f4a799a148f84a2b6197e3bc982496851cb2ff6e89c0d500a3baecbe59a2c9ba82e678a2eb3df41b18aab764d068cc11f9c901bf2b63fc5a274611a09a8","ssdeep":"","tlshash":"7ba002d536a1701df51b6132649f136d386e0505927019fc133d29bd3531cd4725bc7c","size":74,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.222384Z","times_seen":1624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/EGSOL_WEB_UI.JS","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7bcdd0278634d57fba23f7e9d69a2ec","sha1":"234a47aae13703cf5dd34cc60b57e0817310e9a2","sha256":"3182eb594ae6eac50adc0119cd4bfd85cb39e742192960e77300118c8b1391c8","sha512":"3098bb3577399d892796a196dd4af04ad8c40dbbf157cd59d11ef492a40a8acf84abc0e50253da328b55377c18b6c9b88e30a4473d3f0cc99bffd40e9b6d2e1d","ssdeep":"384:s5jRv5bg58qmH30iKHf0+ldJlPdNuMgW0uWD8VDSTELPzO:sdRv5bgeqmH30i0zldJlPd0MgwrVDrzO","tlshash":"b372e94877c5367796cf39b7218f5201a0b36e364b82c814e531e4a85a79f4929b3f3e","size":17206,"data":"","first_seen":"2026-07-04T12:21:07.160426Z","last_seen":"2026-07-04T12:21:07.160426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/fbevents.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2cf87840fa6397b715acf989117a509","sha1":"56eb4f26e87547dca7ed568d3888c5c5ed36633e","sha256":"ba6856b3aa462b18c9f5fc3b0d553eca0fe0f03d5ff668ba7d465394c85896b1","sha512":"c077c3eae1f9d5b13dc09f7779ebdac349b4f8c9b12a5d40524274977338db27a1007dc7ac555d5d8b1a8e3f54f5d39f9dd05f7e3d37bc3deb79e48cc32dd774","ssdeep":"1536:dM+OWt6w6ai79zeidLKqQqcThe7Kdv0a9sIOI1jaVBu5Qm2B+QNSMngUSZYSlIUD:dOUhM1SVBYDGem","tlshash":"6693b68571e1b0928bb6786c967f5007b1b799e670c8c470d59cedd83e684ae4033fba","size":94624,"data":"","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-07-04T12:21:07.179543Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eff409565ed1d22c17d73ce417bd15","sha1":"ae526f9ce16489f0ca53977b7722f56806555342","sha256":"d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3","sha512":"505ce0ccebf07887dab601f952ee07414468a5d4e822ecd45303ff24ae8793ede9c917e0c863a3756e5c214eb82df576b178397c5113a00ff8a42692f7b2c0a2","ssdeep":"","tlshash":"fb8000c20ca2c0b0b0a20c2e00283a008c0e0b38a22033a320a0a002a008003c0302ca","size":32,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-13T01:15:26.090062Z","times_seen":17718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/396613127629341.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1992ab7b0f734985796b1c9980c9806e","sha1":"d128b54bdb0285227ee3066ffb2d8d7cab514773","sha256":"612f38a1b7b17b0405818fa3b08b79451b1767c83eb58bd3302c40886ebfab04","sha512":"63344abc981ed716f3992a6a53a0ce27ed85913afa64553cd37cb10dd518ec5a2876f265b8aa0554ac522b9ce84b06643cce0bbad6fa1b7012308856c8d5c180","ssdeep":"6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmP:dNESC","tlshash":"1844968976d2b09287b779b8513f400bb1ba98e2f48c8c60d65ad9d03e784ed4137f6d","size":261156,"data":"","first_seen":"2026-07-04T12:21:07.203679Z","last_seen":"2026-07-04T12:21:07.203679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"8658a016871651e6493810529282127a","sha1":"12aa1babc59fa84c981fcbda8c1dbd6438a0a2ab","sha256":"3867103c60cb7f6c844ab526dacec3bdc7b0e911041b554ce285696cae73aa86","sha512":"4629903e2f7f54f6fcb26d4b08bdf26da526ea235d385890af518c76fc43d24e191894df296ab5510da06c17884d47431c4baefcaf9584f825c2194cfd6f0d05","ssdeep":"","tlshash":"7860003000030030000c000c00f0c3c33c30000030c3f030330c0000ccf0c0000c0c0c","size":14,"data":"","first_seen":"2023-04-14T10:20:15Z","last_seen":"2026-07-06T21:41:31.544352Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/a_002","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fea75d17ceb8b72eccbd13c3c25e68","sha1":"421aef3af6d6f62371c56560442babcd5b5c82eb","sha256":"799f2bf91877a7d955e6296949e06fb8001fb6531ead9b1d19660edecbfcbdfc","sha512":"79feaca9bfe2a54f2dc48dadbebd87a832a93cca9f5a4bca3aa064a14ddd615d5a69e52e912a1c6f04478349c4386170240e3d9c4e20297e62983dc063fa14b8","ssdeep":"","tlshash":"184130e3f67430578ad48571b73eba0fb831bdd2c988e148e86088548e9d9a760c7bc4","size":2248,"data":"","first_seen":"2026-07-04T12:21:07.180134Z","last_seen":"2026-07-04T12:21:07.180134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b902ac7a83441c4d291e35e508e2079b","sha1":"4faf28a8a89450e3d40a8ee7ad319ea64a5f8d6b","sha256":"ba650492f305e7d187829628c7e7b77fc795555dc03145ab1839c9477fdbb7ef","sha512":"dfb8ddc420cb0768032a971c1dfbb4460646a3687d31ef6d8174126c3fd5bf843c0ba6897b1ac9dea67d408b800a7b31ce8fee347e5c4238edc972e74c0d20a0","ssdeep":"1536:Iafmz+AaPvxQ1k1w1q1rS1M1z1h1I1e1WO:VjvxGO","tlshash":"a3a39aed208a55b1d43f2d90159e489fb53d2477c744b319b201bba88cb13a58b89ffe","size":104759,"data":"","first_seen":"2026-07-04T12:21:07.225649Z","last_seen":"2026-07-04T12:21:07.225649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/top_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56169b824537490076f212ccc08b32ff","sha1":"77c5b8e44ab995372e3202be32b181dd0f1ecab8","sha256":"49b02a5d56142b45f89403ab802fe936deb8b6be0e84bb91013418e254e02792","sha512":"8b4ff239fab60574a338339379b259eafeacbca6a461aecfb5efe3fe3f0fb480cc6fa6e47d92074de747adb84e6ae2630eb934722f481d8c6892c6d7ded9a686","ssdeep":"384:ufatCJcf8MtXPQbBOSWz+oRG4pumt+yvUPi7xcrm9i0AFOK/A0s6ui/jiuFuc/LE:r8ueGLumtp+0AOK/reWCi9f1AS7x7U","tlshash":"d9a38aed208a55b1d43f2d90159e4c9fb53d3477c744b31ab202abac8ca13a58b49fed","size":102500,"data":"","first_seen":"2026-07-04T12:21:07.229392Z","last_seen":"2026-07-04T12:21:07.229392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/check.js;CIS3SID=3D53E5A660E600DFA772C1ABD9616BEC?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jb=3732262668716f753d4e696e757a2468736f3d4c6b6e757a266a7362773d466b7265666f7a266a7b603f46617065666f78253032313134","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e18ca8bf3375a24ee6b015050aa4fb6","sha1":"956705ac7b663a7cb4d2719801eb5ad44efdcaf9","sha256":"537608314023f4eb0c5c48873c0338b6db8a35f76bdf14c68021ee97dafba3d8","sha512":"90e1fb7066afb2665465c187501f1c045cfd72cc352cb82ea9d92e54848c7a5b207703de72505b28858c5883f013d2f67480c3a48a3d35b808ad600053dfd036","ssdeep":"3072:5oVdYh9r06M4cpWa5nTvngpRUf/f7nrzHjqoa:5oDC9r06M4cpWaFvngb0/zu","tlshash":"8ea40ee929d592b2852e2c90194e888f703c74b78744735af110be7c8cf1369d69aefd","size":478170,"data":"","first_seen":"2026-07-04T12:21:07.184784Z","last_seen":"2026-07-04T12:21:07.184784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/analytics.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df1787c4be82d1bb24f8bffa10c7738","sha1":"3634e839429e462e49c5f42b75fbfb4ba318af6d","sha256":"2cb09c7b3e19bfc41743ca3624ef81c3258d56525647feac76aa757e0292627a","sha512":"cb3ce2bceb61f390298c21e470423cceb6dd93e648a7dd0467195b11fef30bf7a086dff47c4494e2533498d1448c1a22aab1414c14fd73278f1c92e0f7bc3f94","ssdeep":"768:/yR3fYFBLbfs5sP5XqY3TyPnHpl1WY3SoavFVv6PU+CgYUD0lgEw0stZM:/y9gZfl5h3UHpaY3SoRCw0sk","tlshash":"e4230af9b7523466c2a271e4403f1007907eedd5f448d8e4a58ad6d46d38eab02fbf68","size":49153,"data":"","first_seen":"2023-03-07T01:40:18Z","last_seen":"2026-07-04T12:21:07.176366Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/conversion_async.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ccf18a0604da5fde83f7b22dd4962f","sha1":"75ebc19c6ed7bbd7ae0b276c6cdf5f6196703b18","sha256":"0581c1a5a4f4c1089860f4a51b5cc6b175795899811a71272831a9302c0d868d","sha512":"2a2d604c0a9c3e4c18c36f2dffe998c8b3654c78533eec325e728fa58ea985d52c257359bb377808fdb10ecfd26113a55e9c51d6cb7f6a3bda566a3129ebdaa1","ssdeep":"1536:s3GDGpIqkuTlbaKW6MLCQmJ4izFerlpul:RbqRaKSmJ4i5erlpk","tlshash":"bc531bcab6d6b06383b3a164502f454bb23ead91b84cd8d0e142d4c47e34b9912b7fbd","size":64657,"data":"","first_seen":"2026-07-02T06:59:10.776103Z","last_seen":"2026-07-12T14:20:30.680546Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/Offers.egain","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41fe2a665dd512847ad839cab0eb0ef9","sha1":"d621759c352d4a859253e70e829fbe3f989a8ac5","sha256":"585fb8ad916f6d14fe7d1db97e0cd98563d2e4d09ed2f99a210a0b6d3255c8d3","sha512":"7bf0f3f9e0c2460daa1220ec36ac9825936af9c495619e45208c1ec81bb3c3f2b2d6a716e5e01fda0c1b898aa08e3074cdd826578209cc661a5e5cf4d4a256bb","ssdeep":"","tlshash":"15c02bbec5133c21437f00d8844d2da1ff04843ee7c40817f8058bba8789c20025210d","size":146,"data":"","first_seen":"2023-03-11T14:17:46Z","last_seen":"2026-07-04T12:21:07.167886Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"55daaa2a73fd1b971676f324be974497","sha1":"f2e39789d9b5daa42d0e044577957b799e620b32","sha256":"107abd1d4c412c9df04a22eea7a81d0ace815adf4ca7b8c2e3d6ea6c459423b5","sha512":"cac6ec026e2d90d81fa9164a7d492d9e64f9c2e292767180392a5418ebf86d91d1c4a335cab2b2510402fbee5f2edba68347189c841043f34921a9d28541f926","ssdeep":"","tlshash":"0f900298b8f1764547123254896f5135655e188072454881430c119138329c9c419529","size":50,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.233973Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/a","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61097f69d94f011b4a2c1409770b6df5","sha1":"96d8ff6de2cb136458a8781ea2897678844dac00","sha256":"72210822d633fc94ca5ef23186b7668c923b0591e472885d5e9e1c012ff9cf95","sha512":"99e420b07dd9f373456ed5100ae7a6dd914d228c6d2d78030b1538b80f728de2971c07e24d977b0fd44c098f2f09f6d0d1eef437b7ad3a2f7cb4d78775e2e286","ssdeep":"","tlshash":"2c4121e3f73471938ad0c5717b7eba0eb835bd83c988e144e97188448a9d9a760c7bd4","size":2222,"data":"","first_seen":"2026-07-04T12:21:07.186664Z","last_seen":"2026-07-04T12:21:07.186664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/wtid.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43896820a4d918eb3e31ab044948aa5d","sha1":"d83982bacff4e8f4ca6eea5da02846a5ea4eca06","sha256":"1f1fecf8bb22fdaedf512aa6760873c25e7290f5d0bf31ba92b936ca0c776e57","sha512":"67332f62da38c771230817d7e22e195f550a539620e10926b7179117bba049c6e193f72c4a5dc0838d3f8a0ea1dab88f23522564b5084cec3d85b192badb0803","ssdeep":"","tlshash":"8ad02288402e84114ce0f77983aa02a808d36230cd0c812c8e41e2b3f00c0782322f98","size":201,"data":"","first_seen":"2026-07-04T12:21:07.198796Z","last_seen":"2026-07-04T12:21:07.198796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/SSO.JS","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd17f5d1d71fd259cb152243caf3a4a2","sha1":"8ddaa96069dfeb2de541ae322047f881fb65818e","sha256":"f63e793f21802c3975a9c6c231682c120960a84522abded0573035b792a4cba6","sha512":"cce32541da909235cff8b9bcee5feb80ca18d367287d1e3a5c56f606c1cfdf439d6322d0de2d25d1c46a967308264f7f8e064c18fc651bcb11c3e82ff3f4dc8c","ssdeep":"384:yK7sq67MssfZ5lfWdKwGeAm18JSyen3igT534Dyj9yTNyryo:yGsq67MHZTFMAma4yen3xT534m4guo","tlshash":"0872962672901476a1ff3031117b170660bab9378a84ec55e5f718b51e3ef08a6b3f9e","size":17428,"data":"","first_seen":"2026-07-04T12:21:07.182787Z","last_seen":"2026-07-04T12:21:07.182787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/tags.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee1a985b30614e2666d06ab81ee0b5d7","sha1":"2423fb1ea0bbc0899109194f5a7a2e2efb82374d","sha256":"a61160fa34283cff4b2a1490585fca6ce5a22b7158ce5492a642d6623e3fbe68","sha512":"d1f4fd1bf85fef729f58d40914a0fb0087a304bad86557f5978e337ca9b89dd58bd7ba6e502a79503c065d8c56fdc9e66b87d9dca88baf85df140e73a389277b","ssdeep":"1536:Aa4araBa7afa0afaeaAanahapakagaM7aoataoawataRataPataZaqanataWaaaI:ge","tlshash":"8f934de40d91d0e2446d1ee01b2f04dbb71c7ab74381a191f2a06ea8f0f6199f7f9d99","size":90135,"data":"","first_seen":"2026-07-04T12:21:07.171592Z","last_seen":"2026-07-04T12:21:07.171592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"90eb5565a909cfb23910404b9543ac4f","sha1":"43956ffd9c2b0dbec81e659e6692a0cfb279d743","sha256":"4c7434541d1c4e35e47fa7017129597be4de29d8520f8d28324360e68ee147bb","sha512":"06a96098fd8262ff74ecfb5279054e224843f02c13c2ac3e106f84d3dd32f8f8e20b645f7e05d09de97d8b3b54aba5d7c802c4d326151311743c038559e752b6","ssdeep":"","tlshash":"a8a002d93654b019c41a3112544f215d386e0551917455e8135c5d5a3531ce5660bc5c","size":61,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.235269Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/gtm.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66c636055188ef5899304e24eee80b62","sha1":"c9e63d7dc8533cca7c57558f8d8fe98985e653ff","sha256":"524b65eaf883bd32bd30df6bf5a619fe3983cab9d718f160cdec0d1f7b2ddb51","sha512":"c9e0749cd3772cf157229e4217c2cb35cfbf68213681b90fb3ce8585eded7c96229d7c0510129e3359e031cfe3e3174c70b10661f059b9f3607416c7f3c831be","ssdeep":"3072:032j6o2ADs3D/mwwAR4txrTNMRv2lU0b5FcOv8x7s1jZmTPOsBUwN:032j6o2ADs3D/mwwAR4txrJOcyOExfDr","tlshash":"78f3d6d8f696b8a6c263b564407f450ba6761863bc4cac90f18dc0d82f7c65e01bbf6d","size":166736,"data":"","first_seen":"2026-07-04T12:21:07.16999Z","last_seen":"2026-07-04T12:21:07.16999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/ARF;CIS3SID=DC247A44E351256C92ACA20432E523B0?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026pageid=99998\u0026sera_parametere=BEZcBw1WUgdSVFVQWwMAB1NQVFEIUQEDU1JQBltXUFAGDgdTWQIJUV1dUxBKQV8MDEYUEUtBAyJBUyMTDnZHV1JcEgBUAV0DChASEwp2R1IgBkRSfEECVgwLEkJKF1EhRwEjQA8gFgINWQQBWFYGXFEHVgReUVRfUlNTAQhUA11TAFZRXQcHVFVXU1cIVgBTUQBHC1cKUwNZBldXXAoGVQRSBQQOXQIEAUILRQQCGgFXVABXXAJUAlUHB1ANBQEDUg8HAFsFAFJXUQQCCQMEA1YHUFwOVAVABQ1cBwgBVUMLX1xICUJAD1ldWA8ACkQNCQtHBwUiWRQBAg5OH1AUWFMFVUNaC0NbKA0PQ0EUAQdfQgUfZwdRCggGAFVSFAcRXwNV\u0026count=0\u0026max=0","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c11d8437c2d9a4ead8ebd8fabb2c754b","sha1":"cbae1c0f44c74f13141de795938631e308b78cae","sha256":"d1954b1c123be274943e1b736a4be1d87059671e6e30ec704c79a02f7958e14b","sha512":"672891288645aa05d559382c58453cc570c16210451a5dd848d937d6ef884a867322c6e740e761da0eee6b2f36c44a7c8a83e21501b7da2719e4c89280f3781b","ssdeep":"","tlshash":"fb800002c2e20e2acb80a2a2a30003032f03cac8a82b2808822022282c0e808a008c83","size":35,"data":"","first_seen":"2023-11-18T20:12:01Z","last_seen":"2026-07-04T12:21:07.178918Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globesourced.shop/index_files/rdvoqldvqhjbezvv267285.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.692Z","timestamp":1783167628692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/rdvoqldvqhjbezvv267285.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11542\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41020,"size_decoded":11866,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32162)","md5":"5952fc7d09b0d8d2f667ffcf97a3af73","sha1":"c082576347a0215b7a2e6cad836cec94a1b43c97","sha256":"682bae34dd1c50a5dab84da95bffb8bcee237a97567561966441640af39cf94d","sha512":"3e2c1ab704816a277443e1d04e175b9e7ab73a23d59a47b8615b2a54e9df49b78a1b93f7bd8c0ef0e59d95324a11410ad6f51585ae2b8dd3d9cd49ceeaac3a96","ssdeep":"768:w58XBKp4IBnQdFL7MuPLc9TQLuck1jpuErIQidBnPSOSpf/SdSdSSD8uXgWDR33U:FBK2IBnIN7Mug9TQz","tlshash":"2f03e7ce33d2e417034f6073a9ab1d16b2379cb855096083e725f9ea74a1d2fd11aeb4","first_seen":"2026-07-04T12:21:07.159224Z","last_seen":"2026-07-04T12:21:07.159224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/EGSOL_WEB_UI.JS","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.696Z","timestamp":1783167628696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/EGSOL_WEB_UI.JS HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5275\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17206,"size_decoded":5598,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17206), with no line terminators","md5":"e7bcdd0278634d57fba23f7e9d69a2ec","sha1":"234a47aae13703cf5dd34cc60b57e0817310e9a2","sha256":"3182eb594ae6eac50adc0119cd4bfd85cb39e742192960e77300118c8b1391c8","sha512":"3098bb3577399d892796a196dd4af04ad8c40dbbf157cd59d11ef492a40a8acf84abc0e50253da328b55377c18b6c9b88e30a4473d3f0cc99bffd40e9b6d2e1d","ssdeep":"384:s5jRv5bg58qmH30iKHf0+ldJlPdNuMgW0uWD8VDSTELPzO:sdRv5bgeqmH30i0zldJlPd0MgwrVDrzO","tlshash":"b372e94877c5367796cf39b7218f5201a0b36e364b82c814e531e4a85a79f4929b3f3e","first_seen":"2026-07-04T12:21:07.160426Z","last_seen":"2026-07-04T12:21:07.160426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ck=0\u0026m=1","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.857Z","timestamp":1783167629857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ck=0\u0026m=1 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:29 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":475,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-13T01:15:25.995689Z","times_seen":22084,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/check.js?\u0026pageid=99998\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmxapi.globalsources.com/fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-07-04T12:20:30.159Z","timestamp":1783167630159,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/check.js?\u0026pageid=99998\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tmxapi.globalsources.com/fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: b6ae8d0fdda692be\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=97\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":224599,"size_decoded":38121,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7107)","md5":"c87998a9e6b7b82c4b099867e176d3ee","sha1":"9fb61743f17b584691f86f25c67e7b4be2bcc6f9","sha256":"98f1ac98ecdf838449342d2c2fbf5280a6a039460add2f6cc4dca9ee76b1273b","sha512":"983d0c501567158f5f9caa95c1d29d5b86e45a7e738647e06b722baa14014b6b74ed3947ba05f144c75922119d7e8e96d64a16f4cead9d0be385af41bed5d624","ssdeep":"768:YPAdYCX/tVYT8A6Of1Afc/EUqTB3TPTJqTeEdSbak31pHGb+aKWp:YPAdYZT89K+3UqTB0ecSbaYHi+aKm","tlshash":"3724d0db0ec082a3d66f5e90271d1c8fa01c707f43a943a5d112bfe998b3b41e6de995","first_seen":"2026-07-04T12:21:07.164591Z","last_seen":"2026-07-04T12:21:07.164591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/conversion_async.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.790Z","timestamp":1783167628790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/conversion_async.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13680\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36916,"size_decoded":14004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2152)","md5":"0f6c3cc1f3f1bcb9fc012bf00a0be279","sha1":"61de16ae0d1d2ef75f228ca110e45ca525c2d1e4","sha256":"929ddedccdd40b8b9a474311266e6eaccc88e2136bbd20c47d571d341d173b29","sha512":"ea50e93c525deb9f0567bb2180717cbba59a4f119eee889d64068acbcb5816ff0504a55e6e349703ec8316b4d046d31b5bcffc47f257146f64bc87c081ba1465","ssdeep":"384:KKrS+J25CtSo56tjfa2X2G3LLa8059LrrtANLGakOSpjeeBMCw/DAruxjtDcJ1zE:DBRsrTa90LGakhtAxjtlOVCnD","tlshash":"d7f209cab641b06bc3a390a4113f490bf37e6a95a888d4d0d642d5c46d34bdd02b7fad","first_seen":"2026-07-04T12:21:07.1659Z","last_seen":"2026-07-04T12:21:07.1659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/SSO.CSS","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.655Z","timestamp":1783167628655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/SSO.CSS HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9141\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42892,"size_decoded":9628,"mime_type":"text/css","magic":"ASCII text, with very long lines (42892), with no line terminators","md5":"c9b89017d88644dd5eaf3c90843faf36","sha1":"631b937ffcb33c36c171b2cb3daa553f9b1797b0","sha256":"a902a54ef745281d6db09a88afc32e80efbb5b355bfb7828a49a6899d2865613","sha512":"b78404f977f96b80955d7a3f71b76c01068304137af72f9fe0e63f1215516c76583d462e43bc50a2b99c7a98d707b8743c73e6380d2159726ed0d39df4306341","ssdeep":"768:R0t0jOsmh8itxc4cHJtTho612wm5L1H0/2Vk6fb:R40jOjtwptho612B5Lt0/4P","tlshash":"c713c9139664213df13bd131bad167de32781637b2635bbefda56a34c6860ea1332708","first_seen":"2023-05-20T15:37:20Z","last_seen":"2026-07-04T12:21:07.166886Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/Offers.egain","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.657Z","timestamp":1783167628657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/Offers.egain HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146,"size_decoded":346,"mime_type":"application/octet-stream","magic":"ASCII text, with CRLF, LF line terminators","md5":"41fe2a665dd512847ad839cab0eb0ef9","sha1":"d621759c352d4a859253e70e829fbe3f989a8ac5","sha256":"585fb8ad916f6d14fe7d1db97e0cd98563d2e4d09ed2f99a210a0b6d3255c8d3","sha512":"7bf0f3f9e0c2460daa1220ec36ac9825936af9c495619e45208c1ec81bb3c3f2b2d6a716e5e01fda0c1b898aa08e3074cdd826578209cc661a5e5cf4d4a256bb","ssdeep":"","tlshash":"15c02bbec5133c21437f00d8844d2da1ff04843ee7c40817f8058bba8789c20025210d","first_seen":"2023-03-11T14:17:46Z","last_seen":"2026-07-04T12:21:07.167886Z","times_seen":50,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/egain-chat.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.659Z","timestamp":1783167628659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/egain-chat.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 730\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2180,"size_decoded":1052,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2180), with no line terminators","md5":"d4f3b41924f55bb8abf9b7a90ae5080b","sha1":"6364dfc609f34980dca9ada457b9cff73e9f611d","sha256":"0b612f32a5ea492a7975ed975b6470c279f280a04ac4de1d027afe1c1e5923bb","sha512":"99ab4d99e6bb32883835c35f0f4dbdfba86227fadac469855eb642cbe486a4969ab8a9e47e85b06977480ceb24546a65571f03e6070a7068a202472845a33a2a","ssdeep":"","tlshash":"7241edbb592853e2acd4305be1eaf6847870a068741195b1c6fcc438b1b4ec250abfec","first_seen":"2023-03-11T14:17:46Z","last_seen":"2026-07-04T12:21:07.169138Z","times_seen":64,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/conversion_async.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.666Z","timestamp":1783167628666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/conversion_async.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13680\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36916,"size_decoded":14004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2152)","md5":"0f6c3cc1f3f1bcb9fc012bf00a0be279","sha1":"61de16ae0d1d2ef75f228ca110e45ca525c2d1e4","sha256":"929ddedccdd40b8b9a474311266e6eaccc88e2136bbd20c47d571d341d173b29","sha512":"ea50e93c525deb9f0567bb2180717cbba59a4f119eee889d64068acbcb5816ff0504a55e6e349703ec8316b4d046d31b5bcffc47f257146f64bc87c081ba1465","ssdeep":"384:KKrS+J25CtSo56tjfa2X2G3LLa8059LrrtANLGakOSpjeeBMCw/DAruxjtDcJ1zE:DBRsrTa90LGakhtAxjtlOVCnD","tlshash":"d7f209cab641b06bc3a390a4113f490bf37e6a95a888d4d0d642d5c46d34bdd02b7fad","first_seen":"2026-07-04T12:21:07.1659Z","last_seen":"2026-07-04T12:21:07.1659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/gtm.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.675Z","timestamp":1783167628675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/gtm.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49432\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166736,"size_decoded":49756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1320)","md5":"66c636055188ef5899304e24eee80b62","sha1":"c9e63d7dc8533cca7c57558f8d8fe98985e653ff","sha256":"524b65eaf883bd32bd30df6bf5a619fe3983cab9d718f160cdec0d1f7b2ddb51","sha512":"c9e0749cd3772cf157229e4217c2cb35cfbf68213681b90fb3ce8585eded7c96229d7c0510129e3359e031cfe3e3174c70b10661f059b9f3607416c7f3c831be","ssdeep":"3072:032j6o2ADs3D/mwwAR4txrTNMRv2lU0b5FcOv8x7s1jZmTPOsBUwN:032j6o2ADs3D/mwwAR4txrJOcyOExfDr","tlshash":"78f3d6d8f696b8a6c263b564407f450ba6761863bc4cac90f18dc0d82f7c65e01bbf6d","first_seen":"2026-07-04T12:21:07.16999Z","last_seen":"2026-07-04T12:21:07.16999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.analytics-egain.com/onetag/EG48975170","fqdn":"analytics.analytics-egain.com","domain":"analytics-egain.com","tld":"com"},"ip":{"addr":"54.171.163.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.413Z","timestamp":1783167629413,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /onetag/EG48975170 HTTP/1.1\r\nHost: analytics.analytics-egain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\ncontent-type: application/json\r\nserver: \r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/tags.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.689Z","timestamp":1783167628689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/tags.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10787\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90135,"size_decoded":11111,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14379)","md5":"ee1a985b30614e2666d06ab81ee0b5d7","sha1":"2423fb1ea0bbc0899109194f5a7a2e2efb82374d","sha256":"a61160fa34283cff4b2a1490585fca6ce5a22b7158ce5492a642d6623e3fbe68","sha512":"d1f4fd1bf85fef729f58d40914a0fb0087a304bad86557f5978e337ca9b89dd58bd7ba6e502a79503c065d8c56fdc9e66b87d9dca88baf85df140e73a389277b","ssdeep":"1536:Aa4araBa7afa0afaeaAanahapakagaM7aoataoawataRataPataZaqanataWaaaI:ge","tlshash":"8f934de40d91d0e2446d1ee01b2f04dbb71c7ab74381a191f2a06ea8f0f6199f7f9d99","first_seen":"2026-07-04T12:21:07.171592Z","last_seen":"2026-07-04T12:21:07.171592Z","times_seen":1,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/GSLOGO.PNG","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.707Z","timestamp":1783167628707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/GSLOGO.PNG HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3788\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3788,"size_decoded":4053,"mime_type":"image/png","magic":"PNG image data, 210 x 32, 8-bit colormap, non-interlaced","md5":"a8656a61ac922e6b5e297627ae7b078a","sha1":"fd0a07d76165669d22d9b8c1e930da9fb51aef22","sha256":"465c8b941a45a964b3c73162a3357083c03e807f2eb45a6e0cc03658f686ece6","sha512":"5c3393ff0555a01f209ffe7d1fd9e799ab00f2b1b0457952919a56ebf15c8eff50ee4681dbde52f06e854947593e7e399193e7c26ef23fc5f8cbbed5e53893bf","ssdeep":"","tlshash":"10717ca603fc9a5c83120a734948d603f7da1847abd1a66b9d3d852713f29ed9c2ff01","first_seen":"2023-05-13T02:45:43Z","last_seen":"2026-07-04T12:21:07.172623Z","times_seen":73,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/egain-docked-chat.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.787Z","timestamp":1783167628787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/egain-docked-chat.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-13T06:17:39.359928Z","times_seen":140299,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/conversion_async.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.416Z","timestamp":1783167629416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /pagead/conversion_async.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\nexpires: Sat, 04 Jul 2026 12:20:29 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 6697267900856884870\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 22852\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":64657,"size_decoded":23483,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2569)","md5":"08ccf18a0604da5fde83f7b22dd4962f","sha1":"75ebc19c6ed7bbd7ae0b276c6cdf5f6196703b18","sha256":"0581c1a5a4f4c1089860f4a51b5cc6b175795899811a71272831a9302c0d868d","sha512":"2a2d604c0a9c3e4c18c36f2dffe998c8b3654c78533eec325e728fa58ea985d52c257359bb377808fdb10ecfd26113a55e9c51d6cb7f6a3bda566a3129ebdaa1","ssdeep":"1536:s3GDGpIqkuTlbaKW6MLCQmJ4izFerlpul:RbqRaKSmJ4i5erlpk","tlshash":"bc531bcab6d6b06383b3a164502f454bb23ead91b84cd8d0e142d4c47e34b9912b7fbd","first_seen":"2026-07-02T06:59:10.776103Z","last_seen":"2026-07-12T14:20:30.680546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":28,"dns":1,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jf=3136266c71603d3062663264663b346665636534326265603161376534653732626532643b3666","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","date":"2026-07-04T12:20:30.206Z","timestamp":1783167630206,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jf=3136266c71603d3062663264663b346665636534326265603161376534653732626532643b3666 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":398,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/analytics.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.677Z","timestamp":1783167628677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/analytics.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19076\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49153,"size_decoded":19400,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1325)","md5":"6df1787c4be82d1bb24f8bffa10c7738","sha1":"3634e839429e462e49c5f42b75fbfb4ba318af6d","sha256":"2cb09c7b3e19bfc41743ca3624ef81c3258d56525647feac76aa757e0292627a","sha512":"cb3ce2bceb61f390298c21e470423cceb6dd93e648a7dd0467195b11fef30bf7a086dff47c4494e2533498d1448c1a22aab1414c14fd73278f1c92e0f7bc3f94","ssdeep":"768:/yR3fYFBLbfs5sP5XqY3TyPnHpl1WY3SoavFVv6PU+CgYUD0lgEw0stZM:/y9gZfl5h3UHpaY3SoRCw0sk","tlshash":"e4230af9b7523466c2a271e4403f1007907eedd5f448d8e4a58ad6d46d38eab02fbf68","first_seen":"2023-03-07T01:40:18Z","last_seen":"2026-07-04T12:21:07.176366Z","times_seen":120,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/APPEDU_LOGO_GOOGLE.JPG","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.709Z","timestamp":1783167628709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/APPEDU_LOGO_GOOGLE.JPG HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4667\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4667,"size_decoded":4933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 142x46, components 3","md5":"f68d2d065e34993ce6e4b832737c7147","sha1":"8e799c63bd8292de2f320b8afa23524107773266","sha256":"b0501c9294231206d2aeb28e8bbd622910de7fc139e02756dc339cb9a68d017f","sha512":"e7bbee5d2a88e30a42c0f804617f11271dfbb091f6a8bc55ab0565d5df4ebd556e755d40151952f0ca077df8c1477a0035fe71c8faa206d748ef9c1a0fbceaa7","ssdeep":"96:Elghe7rvicw4SJSTUWB4Gwni5Hv4rL35Hi4VUSuTRJTTCumDVc:ElgUXw4dUWBF54339iESJTOvDVc","tlshash":"79a18d263c138408e51104bd56df8e225f767b2e7e63d0942b32727ae29275f25e1c0f","first_seen":"2023-05-13T02:45:43Z","last_seen":"2026-07-04T12:21:07.177707Z","times_seen":56,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/ARF;CIS3SID=DC247A44E351256C92ACA20432E523B0?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026pageid=99998\u0026sera_parametere=BEZcBw1WUgdSVFVQWwMAB1NQVFEIUQEDU1JQBltXUFAGDgdTWQIJUV1dUxBKQV8MDEYUEUtBAyJBUyMTDnZHV1JcEgBUAV0DChASEwp2R1IgBkRSfEECVgwLEkJKF1EhRwEjQA8gFgINWQQBWFYGXFEHVgReUVRfUlNTAQhUA11TAFZRXQcHVFVXU1cIVgBTUQBHC1cKUwNZBldXXAoGVQRSBQQOXQIEAUILRQQCGgFXVABXXAJUAlUHB1ANBQEDUg8HAFsFAFJXUQQCCQMEA1YHUFwOVAVABQ1cBwgBVUMLX1xICUJAD1ldWA8ACkQNCQtHBwUiWRQBAg5OH1AUWFMFVUNaC0NbKA0PQ0EUAQdfQgUfZwdRCggGAFVSFAcRXwNV\u0026count=0\u0026max=0","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmxapi.globalsources.com/fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","date":"2026-07-04T12:20:30.509Z","timestamp":1783167630509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/ARF;CIS3SID=DC247A44E351256C92ACA20432E523B0?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026pageid=99998\u0026sera_parametere=BEZcBw1WUgdSVFVQWwMAB1NQVFEIUQEDU1JQBltXUFAGDgdTWQIJUV1dUxBKQV8MDEYUEUtBAyJBUyMTDnZHV1JcEgBUAV0DChASEwp2R1IgBkRSfEECVgwLEkJKF1EhRwEjQA8gFgINWQQBWFYGXFEHVgReUVRfUlNTAQhUA11TAFZRXQcHVFVXU1cIVgBTUQBHC1cKUwNZBldXXAoGVQRSBQQOXQIEAUILRQQCGgFXVABXXAJUAlUHB1ANBQEDUg8HAFsFAFJXUQQCCQMEA1YHUFwOVAVABQ1cBwgBVUMLX1xICUJAD1ldWA8ACkQNCQtHBwUiWRQBAg5OH1AUWFMFVUNaC0NbKA0PQ0EUAQdfQgUfZwdRCggGAFVSFAcRXwNV\u0026count=0\u0026max=0 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tmxapi.globalsources.com/fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=96\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":541,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c11d8437c2d9a4ead8ebd8fabb2c754b","sha1":"cbae1c0f44c74f13141de795938631e308b78cae","sha256":"d1954b1c123be274943e1b736a4be1d87059671e6e30ec704c79a02f7958e14b","sha512":"672891288645aa05d559382c58453cc570c16210451a5dd848d937d6ef884a867322c6e740e761da0eee6b2f36c44a7c8a83e21501b7da2719e4c89280f3781b","ssdeep":"","tlshash":"fb800002c2e20e2acb80a2a2a30003032f03cac8a82b2808822022282c0e808a008c83","first_seen":"2023-11-18T20:12:01Z","last_seen":"2026-07-04T12:21:07.178918Z","times_seen":36,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/fbevents.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.671Z","timestamp":1783167628671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/fbevents.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22702\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94624,"size_decoded":23026,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64343)","md5":"c2cf87840fa6397b715acf989117a509","sha1":"56eb4f26e87547dca7ed568d3888c5c5ed36633e","sha256":"ba6856b3aa462b18c9f5fc3b0d553eca0fe0f03d5ff668ba7d465394c85896b1","sha512":"c077c3eae1f9d5b13dc09f7779ebdac349b4f8c9b12a5d40524274977338db27a1007dc7ac555d5d8b1a8e3f54f5d39f9dd05f7e3d37bc3deb79e48cc32dd774","ssdeep":"1536:dM+OWt6w6ai79zeidLKqQqcThe7Kdv0a9sIOI1jaVBu5Qm2B+QNSMngUSZYSlIUD:dOUhM1SVBYDGem","tlshash":"6693b68571e1b0928bb6786c967f5007b1b799e670c8c470d59cedd83e684ae4033fba","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-07-04T12:21:07.179543Z","times_seen":82,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/a_002","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.694Z","timestamp":1783167628694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/a_002 HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2248\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2248,"size_decoded":2409,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2248), with no line terminators","md5":"c7fea75d17ceb8b72eccbd13c3c25e68","sha1":"421aef3af6d6f62371c56560442babcd5b5c82eb","sha256":"799f2bf91877a7d955e6296949e06fb8001fb6531ead9b1d19660edecbfcbdfc","sha512":"79feaca9bfe2a54f2dc48dadbebd87a832a93cca9f5a4bca3aa064a14ddd615d5a69e52e912a1c6f04478349c4386170240e3d9c4e20297e62983dc063fa14b8","ssdeep":"","tlshash":"184130e3f67430578ad48571b73eba0fb831bdd2c988e148e86088548e9d9a760c7bc4","first_seen":"2026-07-04T12:21:07.180134Z","last_seen":"2026-07-04T12:21:07.180134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/a.html","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.080Z","timestamp":1783167629080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/a.html HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108,"size_decoded":293,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"67c58a38087e1a243fd14984f663b520","sha1":"d39158107e8711b6d9fbe13be4a3a3156f571e08","sha256":"ad3cc24a66bae714bcb1536ba2be070d636f61bbdfedf1e66de4d2a610a4f9e1","sha512":"5cf5428985e4315f7d19fa546e038cbce88a13149772002b4e76dce223270b74313f8fa246368d2486bd06008986671f44a0bf6e1fe5847a23fa8fd2375a4d81","ssdeep":"","tlshash":"afb012f51842000fb660fbe04ccef2184801c910f0098c40a49031fd54cd70dd8d3790","first_seen":"2023-04-05T03:14:44Z","last_seen":"2026-07-04T12:21:07.18133Z","times_seen":122,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/SSO.JS","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.697Z","timestamp":1783167628697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/SSO.JS HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4328\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17428,"size_decoded":4651,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17428), with no line terminators","md5":"bd17f5d1d71fd259cb152243caf3a4a2","sha1":"8ddaa96069dfeb2de541ae322047f881fb65818e","sha256":"f63e793f21802c3975a9c6c231682c120960a84522abded0573035b792a4cba6","sha512":"cce32541da909235cff8b9bcee5feb80ca18d367287d1e3a5c56f606c1cfdf439d6322d0de2d25d1c46a967308264f7f8e064c18fc651bcb11c3e82ff3f4dc8c","ssdeep":"384:yK7sq67MssfZ5lfWdKwGeAm18JSyen3igT534Dyj9yTNyryo:yGsq67MHZTFMAma4yen3xT534m4guo","tlshash":"0872962672901476a1ff3031117b170660bab9378a84ec55e5f718b51e3ef08a6b3f9e","first_seen":"2026-07-04T12:21:07.182787Z","last_seen":"2026-07-04T12:21:07.182787Z","times_seen":1,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/check.js;CIS3SID=3D53E5A660E600DFA772C1ABD9616BEC?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jb=3732262668716f753d4e696e757a2468736f3d4c6b6e757a266a7362773d466b7265666f7a266a7b603f46617065666f78253032313134","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.841Z","timestamp":1783167629841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/check.js;CIS3SID=3D53E5A660E600DFA772C1ABD9616BEC?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jb=3732262668716f753d4e696e757a2468736f3d4c6b6e757a266a7362773d466b7265666f7a266a7b603f46617065666f78253032313134 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:29 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ntmx-nonce: b6ae8d0fdda692be\r\nX-Robots-Tag: noindex, nofollow\r\nSet-Cookie: thx_guid=4f71c21773d00613ce8dd1fc86407968; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;\r\nP3P: CP=IVAa PSAa\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478170,"size_decoded":100291,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"6e18ca8bf3375a24ee6b015050aa4fb6","sha1":"956705ac7b663a7cb4d2719801eb5ad44efdcaf9","sha256":"537608314023f4eb0c5c48873c0338b6db8a35f76bdf14c68021ee97dafba3d8","sha512":"90e1fb7066afb2665465c187501f1c045cfd72cc352cb82ea9d92e54848c7a5b207703de72505b28858c5883f013d2f67480c3a48a3d35b808ad600053dfd036","ssdeep":"3072:5oVdYh9r06M4cpWa5nTvngpRUf/f7nrzHjqoa:5oDC9r06M4cpWaFvngb0/zu","tlshash":"8ea40ee929d592b2852e2c90194e888f703c74b78744735af110be7c8cf1369d69aefd","first_seen":"2026-07-04T12:21:07.184784Z","last_seen":"2026-07-04T12:21:07.184784Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":5,"connect":18,"send":0,"wait":31,"receive":41,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ck=0\u0026m=2","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.843Z","timestamp":1783167629843,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ck=0\u0026m=2 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":475,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-13T01:15:25.995689Z","times_seen":22084,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":18,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jac=1\u0026je=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","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:31.317Z","timestamp":1783167631317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jac=1\u0026je=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 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:31 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":398,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/a","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.693Z","timestamp":1783167628693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/a HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2222\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2222,"size_decoded":2383,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2222), with no line terminators","md5":"61097f69d94f011b4a2c1409770b6df5","sha1":"96d8ff6de2cb136458a8781ea2897678844dac00","sha256":"72210822d633fc94ca5ef23186b7668c923b0591e472885d5e9e1c012ff9cf95","sha512":"99e420b07dd9f373456ed5100ae7a6dd914d228c6d2d78030b1538b80f728de2971c07e24d977b0fd44c098f2f09f6d0d1eef437b7ad3a2f7cb4d78775e2e286","ssdeep":"","tlshash":"2c4121e3f73471938ad0c5717b7eba0eb835bd83c988e144e97188448a9d9a760c7bd4","first_seen":"2026-07-04T12:21:07.186664Z","last_seen":"2026-07-04T12:21:07.186664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.045Z","timestamp":1783167630045,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*, 5uvbsw0f/b6ae8d0fdda692be3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://globesourced.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nLast-Modified: Sat, 04 Jul 2026 12:20:30 GMT\r\nExpires: Thu, 03 Jul 2031 12:20:30 GMT\r\nEtag: 2e0fd2e3fdcf4b0bac988ebbe30fab79\r\nCache-Control: private, must-revalidate, max-age=0\r\nAccess-Control-Allow-Origin: https://globesourced.shop\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":533,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-13T01:15:25.995689Z","times_seen":22084,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jb=3136266c71633d6635613239386337643237303460373660353666343b30323666373733353962","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.059Z","timestamp":1783167630059,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jb=3136266c71633d6635613239386337643237303460373660353666343b30323666373733353962 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":399,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear1.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jf=36313426716b645f726c643d7466705d754444345b45583a496b45374066737a267369645d64617c673f313f3a33313637363132267169645d747972673f7767603a656366716126736b645f6b677b3f33303539313031313036303730613834343863653164303a3233303e323832613836363a636733643233303332353031363230303236623133646630653037643863623435383532626336636764643b373565343b3536396433386b3b30303562393a32303334396633393a3a6737366739626632313739666632356432313561326136666236303536653934303434396161346130336d6160643032346364643537633266613633326636373a3433373762333436267369665f7369653f3130343430303230343532623432656460666433643638663a673a306e3530303663636467326035633a63653031376135616637333b3134396230366239633a3a6639303666346332323230323466353b33393064323539383b6333696466616264316366393a34303639623a6164613335396631613037613534303330366335646139303736653264333526716966703d30","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.475Z","timestamp":1783167630475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear1.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jf=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 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: image/png;charset=UTF-8\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=97\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":500,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-13T01:15:25.995689Z","times_seen":22084,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/APPEDU_LOGO_APP.JPG","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.708Z","timestamp":1783167628708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/APPEDU_LOGO_APP.JPG HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4284\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4284,"size_decoded":4550,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 142x46, components 3","md5":"3416d1e30f078febf83bad93f15f7ba6","sha1":"2997b26ac512fd945f5c1ef64e3bcf178ee47f6b","sha256":"900774ab9d108ddeee13c38f67680d8b855588ab4b3c37949fa79f4b15c4e3a9","sha512":"fa34f762aab85d8175982f3a4e0cc21d6f0a56d68228160650d37205ac88ef5e21677e53f030beadb73add1e6fe5780890a4f4a11533acaede70b140d85fbc6b","ssdeep":"96:EB7iYwT+CkL2ETWOZe1ZtAz33BiGs+pnc1MzXOidO:EBuRKNNqUiZtAr3sV+ZaMzXZQ","tlshash":"80914c6798db93ebc0044a386855b77b6d66374d845b1ea101f20731f0199fbdd11215","first_seen":"2023-05-13T02:45:43Z","last_seen":"2026-07-04T12:21:07.188198Z","times_seen":56,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com.ng/pagead/1p-user-list/1072021429/?random=1622568755644\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=844361191\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=1\u0026ipr=y","fqdn":"www.google.com.ng","domain":"google.com.ng","tld":"com.ng"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.404Z","timestamp":1783167629404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com.ng","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:42:35 GMT","end":"Mon, 07 Sep 2026 08:42:34 GMT"},"fingerprint":{"sha1":"FA:A8:31:08:34:25:ED:38:1F:A4:63:57:BE:73:19:DF:3E:E8:8A:3D","sha256":"57:03:09:50:FC:0A:50:50:88:E4:C2:85:EE:09:78:35:EF:A6:16:99:8B:8C:A0:6A:9D:99:38:28:9D:60:D6:14"}}},"request":{"raw":"GET /pagead/1p-user-list/1072021429/?random=1622568755644\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=844361191\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=1\u0026ipr=y HTTP/1.1\r\nHost: www.google.com.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":621,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T06:16:49.941525Z","times_seen":984894,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":109,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ja=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\u0026jb=333133266e733d4d6f78696c6c63273046352e302732302a57696e646d77732732304e5427323039322c302d3142253230576b6c36362533402532327a343427314225323270762533433133342c322b2532304767636b6d25324632323130323130312530304661706766677a2532463133362c30","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.051Z","timestamp":1783167630051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear.png?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026ja=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\u0026jb=333133266e733d4d6f78696c6c63273046352e302732302a57696e646d77732732304e5427323039322c302d3142253230576b6c36362533402532327a343427314225323270762533433133342c322b2532304767636b6d25324632323130323130312530304661706766677a2532463133362c30 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=98\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":406,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026fr","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","date":"2026-07-04T12:20:30.209Z","timestamp":1783167630209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026fr HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":134,"size_decoded":639,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"16a9eaa0c9fcb807d10a889e9e815fdc","sha1":"dd26c346e4a7b51fce2900203ade7b0ad5cbef80","sha256":"f77b7684ca0bb1f68a77b88b5381eb864fe749086802bc9da25436da99866026","sha512":"06cd8ffee6ca11330d4cb797618924a34860fd24bce35579e44b0b48fb6b90b9e64377bf7b3f892d754243d38b538e527bd47b11d4f8253684920b2671869914","ssdeep":"","tlshash":"f7c02bef1f64dfc18fc254c1900df134eaa47200e01cffa0243431c0587400c2290446","first_seen":"2026-07-04T12:21:07.190639Z","last_seen":"2026-07-04T12:21:07.190639Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/egain_docked_chat.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.682Z","timestamp":1783167628682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/egain_docked_chat.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 641\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1590,"size_decoded":963,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1590), with no line terminators","md5":"c1e4da9b914991b022ed31cca6e320b9","sha1":"e59644d42fa4bb245767c78349bcd4909497d4fe","sha256":"48bbe0df71c6d5a101831666c71c5a2909a8f6b53b71f5371bad3497161656a4","sha512":"e8fea4938cc241c350ff6e17f67bac9c5e7520fa1757bc50c482e6ea2f51206870d635f6c25ad9a6c0825cc226d0b01079d4f4c57c8950a2dde01addaab37d9f","ssdeep":"","tlshash":"6e31cdba1b7ce2e528700d5f545b5320a16898b0e384b7f3539bd89c249cd1d4467fcc","first_seen":"2026-07-04T12:21:07.191818Z","last_seen":"2026-07-04T12:21:07.191818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com.ng/pagead/1p-user-list/1027654176/?random=1622568755734\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=376635470%2C2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=2157007984\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=1\u0026ipr=y","fqdn":"www.google.com.ng","domain":"google.com.ng","tld":"com.ng"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.421Z","timestamp":1783167629421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com.ng","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:42:35 GMT","end":"Mon, 07 Sep 2026 08:42:34 GMT"},"fingerprint":{"sha1":"FA:A8:31:08:34:25:ED:38:1F:A4:63:57:BE:73:19:DF:3E:E8:8A:3D","sha256":"57:03:09:50:FC:0A:50:50:88:E4:C2:85:EE:09:78:35:EF:A6:16:99:8B:8C:A0:6A:9D:99:38:28:9D:60:D6:14"}}},"request":{"raw":"GET /pagead/1p-user-list/1027654176/?random=1622568755734\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=376635470%2C2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=2157007984\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=1\u0026ipr=y HTTP/1.1\r\nHost: www.google.com.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":641,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T06:16:49.941525Z","times_seen":984894,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.028Z","timestamp":1783167630028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/HP?session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026org_id=5uvbsw0f\u0026nonce=b6ae8d0fdda692be\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-UA-Compatible: IE=Edge\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en-US\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19067,"size_decoded":7376,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f4a3068642bea8e2043fff6e5878fc59","sha1":"811ef632ec1ea67c41aabad7198d43493a2b0e80","sha256":"502a225725d301c29cc61012a46407272566c6fc69edc7035f22ce740bc6cb87","sha512":"27238afcacc9e024a79cfebb34e006ee3ad0d0c57a3c40d00f22f14a006dad7cd7e6bf8fd3183cd62a59d4754f744c1b459a2eab11d637abf7607fc99bd67b2d","ssdeep":"192:sfmwmVeZkBOOxfQWihW0zk2M6vv+Ug7/Bg+OY2V9p3FIglgEL3sP7K+69:sfAsZkB98hWgz2Ug7O+ONDDIkxL3q+39","tlshash":"f38295045981ec3646628078d0e9be8ed39c8532d356b46835df619bafc1c9c07f7b8d","first_seen":"2026-07-04T12:21:07.19308Z","last_seen":"2026-07-04T12:21:07.19308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear3.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jac=1\u0026je=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","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:31.345Z","timestamp":1783167631345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026jac=1\u0026je=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 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Sat, 04 Jul 2026 12:20:31 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=94\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":406,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/clear3.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026je=3b3926266060763d33246a61633f33247265763d372e38362c35392e3a382c37392e37392e3539263a332c3e322e35322c353b2c38332c353b2e383b2e37392c3a352c353b2c39342c34302e353b2e37392e38392e35392c37392c353b2e37372c35392e3b37","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:40.962Z","timestamp":1783167640962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/clear3.png;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be\u0026je=3b3926266060763d33246a61633f33247265763d372e38362c35392e3a382c37392e37392e3539263a332c3e322e35322c353b2c38332c353b2e383b2e37392c3a352c353b2c39342c34302e353b2e37392e38392e35392c37392c353b2e37372c35392e3b37 HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Sat, 04 Jul 2026 12:20:41 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":407,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":18,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/webtrends_002.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.662Z","timestamp":1783167628662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/webtrends_002.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1923\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7382,"size_decoded":2246,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2ea8b95abb8ab706e7a0cfa9685cd10","sha1":"8b75b0f6fff26a3a651d9346db02fefe45a67379","sha256":"fe11671e8ca6d3b5659e5dae0924ecae80c99c0dd72478710eed0886e687f69d","sha512":"c10e2134fbdcdda735e9eadb705e4f15712b0cdcae15a8fab0b745c1d5014d52932f79c4435bd331de72d1a5c5a337da8a39aaa580ad3dc3671c6417741e2af8","ssdeep":"96:ZnNFRdOYCKON8nBnN3xePBciKF1YD0VFjmls5EHOTxp1:5bfOYCz8nTtYD0VdmbIx/","tlshash":"e2e103a8158e913208fb615ceb75938afb7e53332557e023746ca65c5f30c338566eca","first_seen":"2025-01-04T16:53:03.253069Z","last_seen":"2026-07-04T12:21:07.194402Z","times_seen":44,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/ssoscripts.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.681Z","timestamp":1783167628681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/ssoscripts.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10095\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40414,"size_decoded":10419,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40414), with no line terminators","md5":"fa083e182fd093cb8f5fa924348f39b0","sha1":"67270339d14bb7055a836056fbece8ac113503bf","sha256":"df86e5af01c80afb70fe6d93636b8e119e3f4293cf0686d61448ddf8e96339db","sha512":"85df9a09e1c841e0971ba51b6c4d92950bb993b6937bff343cd157873abb5ad80e59e035dcf66961a28bcda1c42b0682a6861ff71d526ba27283a4dc35e2cdf6","ssdeep":"768:96OzjmT9jVma49kFV0BEBF+oTPpwaQ/P82BoT6xlU0TClvO1eqdg1eqiNhR1Oztp:HzjC9x549kFV0BEBF+oTPpwaQ/P82BoX","tlshash":"720308c33290247a57f901e52daf0a0ab1bca9735f5498e4c1a4d8631634fc9b977ee8","first_seen":"2026-07-04T12:21:07.195815Z","last_seen":"2026-07-04T12:21:07.195815Z","times_seen":1,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/BLANK.GIF","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.712Z","timestamp":1783167628712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/BLANK.GIF HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":306,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"55fade2068e7503eae8d7ddf5eb6bd09","sha1":"317496a096d6c86486a71d4521994bcd171a6bb3","sha256":"e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e","sha512":"a9adb9feea4bc14b9c34ed17cd30f8cb36dc686e9f69a292fe65bebc195be4714391fd98ec7b67bfd363fbbb6089c41a0b7cab5130b50b461748e668cac75621","ssdeep":"","tlshash":"0a900003cac8c220c282c030080c23002bbaa8b002a8830ec0bc30fcec2a3ab8c02000","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-07-13T03:12:35.538444Z","times_seen":4912,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/wtid.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.661Z","timestamp":1783167628661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/wtid.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 136\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":201,"size_decoded":458,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"43896820a4d918eb3e31ab044948aa5d","sha1":"d83982bacff4e8f4ca6eea5da02846a5ea4eca06","sha256":"1f1fecf8bb22fdaedf512aa6760873c25e7290f5d0bf31ba92b936ca0c776e57","sha512":"67332f62da38c771230817d7e22e195f550a539620e10926b7179117bba049c6e193f72c4a5dc0838d3f8a0ea1dab88f23522564b5084cec3d85b192badb0803","ssdeep":"","tlshash":"8ad02288402e84114ce0f77983aa02a808d36230cd0c812c8e41e2b3f00c0782322f98","first_seen":"2026-07-04T12:21:07.198796Z","last_seen":"2026-07-04T12:21:07.198796Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-user-list/1027654176/?random=1622568755734\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=376635470%2C2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=2157007984\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=0\u0026ipr=y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.419Z","timestamp":1783167629419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /pagead/1p-user-list/1027654176/?random=1622568755734\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=376635470%2C2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=2157007984\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=0\u0026ipr=y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":621,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T06:16:49.941525Z","times_seen":984894,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":27,"dns":1,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.056Z","timestamp":1783167630056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/ls_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=99\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104855,"size_decoded":18947,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"5e44fceefcd11bd9cadc21d629c32750","sha1":"31ed0b569c7693bede45068b8e0655c6dca0ac56","sha256":"d2e2e0d8d88eb5d51f90797c0e210f7ba2c30d36d3e820e65e99765418419fe3","sha512":"c6b9751d061f04af008fb6a5f8ef19a69e910c297633eb2eb72244c24712cc2e525c2e484557278847030f7292be39d937242792a27e2123457775bfcab58704","ssdeep":"1536:Iafmz+AaPvxQ1k1w1q1rS1M1z1h1I1e1Wl:VjvxGl","tlshash":"e6a39aed208a55b1d43f2d90159e489fb53d2477c744b319b201bba88cb13a58b89ffe","first_seen":"2026-07-04T12:21:07.201603Z","last_seen":"2026-07-04T12:21:07.201603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/396613127629341.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.669Z","timestamp":1783167628669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/396613127629341.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36481\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":261156,"size_decoded":36805,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64471)","md5":"1992ab7b0f734985796b1c9980c9806e","sha1":"d128b54bdb0285227ee3066ffb2d8d7cab514773","sha256":"612f38a1b7b17b0405818fa3b08b79451b1767c83eb58bd3302c40886ebfab04","sha512":"63344abc981ed716f3992a6a53a0ce27ed85913afa64553cd37cb10dd518ec5a2876f265b8aa0554ac522b9ce84b06643cce0bbad6fa1b7012308856c8d5c180","ssdeep":"6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzmP:dNESC","tlshash":"1844968976d2b09287b779b8513f400bb1ba98e2f48c8c60d65ad9d03e784ed4137f6d","first_seen":"2026-07-04T12:21:07.203679Z","last_seen":"2026-07-04T12:21:07.203679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/insight.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.673Z","timestamp":1783167628673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/insight.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1742\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4322,"size_decoded":2065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4321)","md5":"d3b7f1a92dd6719f87830997e69f3675","sha1":"a8bc777fd7187e3a56d5214a3bbddd95ec575ded","sha256":"5f3b103a1268f862a5e432d607f8e5220dea9d301d13565b0ecded3ad9c25ab2","sha512":"fdbbb5fb56922c71cbf877ca1cd901afd243342106303c85f3074868eef27ac1e0e6c0ab0a46961457c8441a2a2a1c75136977ff908edc68c59a3386117e7653","ssdeep":"96:LvleavwqOcvwM6kpL5CN6Cysim8jvuoHFmtXgM4nldI2XDzxp:Zvwkvw/8Ao7vjmtQ5lW2hp","tlshash":"ef91a6e47585f86587d77496437f345ab3baa300aced4890d40be0c02b74b9a91e2fb8","first_seen":"2023-03-07T16:45:52Z","last_seen":"2026-07-04T12:21:07.205275Z","times_seen":55,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/webtrends.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.678Z","timestamp":1783167628678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/webtrends.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8393\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24123,"size_decoded":8716,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"49fd3014ac5399a5e6486deb7775e17a","sha1":"7dfe05ffaba0577861a89ac9c7e81f21663987c1","sha256":"bceccc4659416c72597c905dd9f17f9245ad9c0f1258147bfba31d9b29368f3d","sha512":"06578a0c14860ceedeb00720e8f96c2606fbd6409f93bdf3a656bbda27400c5d0773b7d38b86afda2ccaa7a20b86f0378f7cea789a40889f3962e791f1a938b7","ssdeep":"384:WJALDmPxIwqXRwdb/WftDRPUnclVgq1cGSO+8yhj9KAwOyIOb6/5LkOilp3qdUFg:WJALqw0etvFJA9rwxSOOOp6dkE+6ITdE","tlshash":"89b21a85b2e0313382b274e4042f634ab077b56aa8844cacf594f4e59d74f5a01bff79","first_seen":"2023-03-07T17:53:34Z","last_seen":"2026-07-04T12:21:07.207592Z","times_seen":60,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/GSLOGIN_PROMO_PIC.JPG","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.711Z","timestamp":1783167628711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/GSLOGIN_PROMO_PIC.JPG HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64609\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64609,"size_decoded":64876,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 456x555, components 3","md5":"f4cfa4fb0267a0184bc6caa933d39633","sha1":"7871c922ca703ddf022e5cf32d70de76ea42be16","sha256":"a333d615df16eae983fc674e1e06c445d08bc440cb16eff950ec7570d98c3206","sha512":"4039679428cac4ba6edc199688a96cc3ef6aa42bb6f5bb273cf2a7bf473bcd66b10ccee5cbd736d9ceb45bacd72c16d3db6e0a4c86c32ede6bb80220a1d0a2c6","ssdeep":"1536:DF7UU9Wkfk8Z/2F6D8cHYVReZzanPDLiT6VeX0R5rHwtraGmiTp6Wp3zcE:RUUjk8Z/2WHHceZKDWTwFHUyitjZ","tlshash":"bb53f135ab8186339eea7865225d6722a71f4137c1d1fc21c0c7b07a7293d9088f66e9","first_seen":"2023-05-13T02:45:43Z","last_seen":"2026-07-04T12:21:07.209549Z","times_seen":56,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/favicon.ico","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.426Z","timestamp":1783167629426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-13T06:17:39.359928Z","times_seen":140299,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.061Z","timestamp":1783167630061,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/es.js?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=100\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":639,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"bf9580a6d32c377b97f6ee0c7019b820","sha1":"f7be3c8c51117d8fa06ca4117f0666726e98c4ea","sha256":"d6dc5d1122989b23f8589ea672e5e1e06a01b9fa7b1fed3f6515990a3f7f51dd","sha512":"ed21486e4f785b651be44b1cef8f3fa0dc4de0e20f0b74f48542f2890b3f760e54d53c7e203c664dae7d5f9f7d3bfd3d3864d8ccbd1b22863355c1c0d08c7fdf","ssdeep":"","tlshash":"4cc02b4c0b0a2e415270c04eae86543298b005b4d27ca174300ae04407c400043d0e85","first_seen":"2026-07-04T12:21:07.211252Z","last_seen":"2026-07-04T12:21:07.211252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":19,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmxapi.globalsources.com/fp/top_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be","fqdn":"tmxapi.globalsources.com","domain":"globalsources.com","tld":"com"},"ip":{"addr":"91.235.133.77","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:30.085Z","timestamp":1783167630085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmxapi.globalsources.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:75:4C:37:A8:72:E0:C1:D7:A4:2F:65:07:44:02:D9:A8:8C:46:AF","sha256":"FD:6B:40:54:69:38:BC:81:71:D5:02:42:ED:DB:B0:F8:87:4D:73:71:56:EA:AF:F1:D3:D2:F9:20:74:D0:4C:36"}}},"request":{"raw":"GET /fp/top_fp.html;CIS3SID=EF35FBE4D41F8F5C5B2111F9CDB73F09?org_id=5uvbsw0f\u0026session_id=3aaa3baaef1e12b61114cde6e4a420424a1acd09f219fe0d4a274bd4f4e6bf13\u0026nonce=b6ae8d0fdda692be HTTP/1.1\r\nHost: tmxapi.globalsources.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nCookie: thx_guid=4f71c21773d00613ce8dd1fc86407968\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Jul 2026 12:20:30 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nConnection: Keep-Alive, Keep-Alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Robots-Tag: noindex, nofollow\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=2, max=98\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":102596,"size_decoded":18441,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16596)","md5":"b17a03da4fce808b89f56223875b552f","sha1":"ca97726d9f9f6ce5fbe4e316751a622c2613087e","sha256":"a9cb54debd3c4e4e7de8e73a7efa705b5002e8513006d05a6c6c371f88702a55","sha512":"081488ea29916abed6d31cadad7824f39b34eeb8d6a50926bab503c77e2ee95dfa8b772b164d82d1a9f90abe6187037e9b58ae5cb1545f9de55c77e174d429dd","ssdeep":"384:ufatCJcf8MtXPQbBOSWz+oRG4pumt+yvUPi7xcrm9i0AFOK/A0s6ui/jiuFuc/Lz:r8ueGLumtp+0AOK/reWCi9f1AS7x7j","tlshash":"b8a38aed208a55b1d43f2d90159e4c9fb53d3477c744b31ab201abac8ca13a58b49fed","first_seen":"2026-07-04T12:21:07.212729Z","last_seen":"2026-07-04T12:21:07.212729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T12:20:27.476Z","timestamp":1783167627476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 02 Jul 2026 08:20:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":6990,"size_decoded":2548,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1283), with CRLF line terminators","md5":"e54e44120000e8a520e63513cf53341d","sha1":"280b6b7cce464c8214c93488d6d51c148d69db8a","sha256":"33edb7eb28a813e24930ec1e494edbb4e5dfcb33bcbb504cd3cf063c317d56d8","sha512":"d504c1091d8e7a21b3b6205a851901208c0701967980b75946fa63f3eb7615e1415a45eb09706aa6640da1f98d505434195277fbe46c0bd79ce1310832f610ec","ssdeep":"192:Sf19GjJ7ty+q8nweMBthaYvFTP9p1Qbpi:SfzGRqkGthaY937","tlshash":"b1e1431b5c4a8c3f466298f4e0a0ff69919ec305eb129c5c91f821db97c1fcd489b59a","first_seen":"2026-07-04T12:21:07.214155Z","last_seen":"2026-07-04T12:21:07.214155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":0,"dns":70,"connect":98,"send":0,"wait":191,"receive":0,"ssl":590},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/index_files/jqueryandplugins.js","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:28.680Z","timestamp":1783167628680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"GET /index_files/jqueryandplugins.js HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Jul 2026 12:20:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jun 2021 02:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34511\r\ndate: Sat, 04 Jul 2026 12:20:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101169,"size_decoded":34835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"4c6f74b0edf08f65d720d579b47425f9","sha1":"5944fabf9c52774f64bbe070083e598ce498a28c","sha256":"5ee7561a3a5c0bcfd620ab6004ff7cab8ee16c800aada8a165c32cd104086cd5","sha512":"316ad6010796ab23406ea24394e2939c17108a3472e9bd0af67f2ac632930b343e55d0216312bd71528d9e6444f02e6d38a15f7c73d0ba452df1a0214a94ebad","ssdeep":"1536:b5Ay3b2EZJSFVhY/fl8q/AJOfubEgcAK2exXd0XOGNA7cWPm2F2V3objtvN+mJmd:at3r13F65P32ujtvNj0","tlshash":"4aa31ad9f39774724b6b30b861bf110bb17768a5a81c84a0f064d8e4bc78a8d517bf2d","first_seen":"2023-03-07T17:53:34Z","last_seen":"2026-07-04T12:21:07.215758Z","times_seen":56,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-user-list/1072021429/?random=1622568755644\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=844361191\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=0\u0026ipr=y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.401Z","timestamp":1783167629401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:38:57 GMT","end":"Mon, 07 Sep 2026 08:38:56 GMT"},"fingerprint":{"sha1":"8F:58:DC:41:A3:1C:83:FC:7F:78:F8:57:50:3B:E0:FF:3A:2D:F5:23","sha256":"16:63:83:EC:E6:54:6D:BF:13:1A:0F:F6:7C:B8:D8:2C:DC:6D:BE:AE:45:CA:AE:68:1B:04:52:E3:30:E6:EA:0F"}}},"request":{"raw":"GET /pagead/1p-user-list/1072021429/?random=1622568755644\u0026cv=9\u0026fst=1622566800000\u0026num=1\u0026guid=ON\u0026eid=2505059650\u0026u_h=972\u0026u_w=1728\u0026u_ah=972\u0026u_aw=1728\u0026u_cd=24\u0026u_his=1\u0026u_tz=60\u0026u_java=false\u0026u_nplug=0\u0026u_nmime=0\u0026gtm=2wg5q1\u0026sendb=1\u0026frm=0\u0026url=https%3A%2F%2Flogin.globalsources.com%2Fsso%2FGeneralManager%3Faction%3DLogin\u0026tiba=Global%20Sources\u0026async=1\u0026fmt=3\u0026is_vtc=1\u0026random=844361191\u0026resp=GooglemKTybQhCsO\u0026rmt_tld=0\u0026ipr=y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":621,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T06:16:49.941525Z","times_seen":984894,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globesourced.shop/rdvoqldvqhjbezvv267285.js?PID=93308F68-50BF-3C57-8385-0DE082BCCE5A","fqdn":"globesourced.shop","domain":"globesourced.shop","tld":"shop"},"ip":{"addr":"191.101.50.240","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globesourced.shop/","date":"2026-07-04T12:20:29.661Z","timestamp":1783167629661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globesourced.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 02:23:12 GMT","end":"Wed, 30 Sep 2026 02:23:11 GMT"},"fingerprint":{"sha1":"E8:19:2E:00:AE:6F:AB:81:E7:75:D8:D5:BA:2C:EE:02:22:C7:D3:E1","sha256":"48:78:E1:2A:E5:39:5B:F5:7E:65:B7:F6:6B:97:F3:35:69:67:67:1F:8B:B9:DE:35:31:32:B8:11:85:5A:A3:3E"}}},"request":{"raw":"POST /rdvoqldvqhjbezvv267285.js?PID=93308F68-50BF-3C57-8385-0DE082BCCE5A HTTP/1.1\r\nHost: globesourced.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Distil-Ajax: sftqebqzetcq\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6750\r\nOrigin: https://globesourced.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globesourced.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 04 Jul 2026 12:20:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-13T06:17:39.359928Z","times_seen":140299,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"globesourced.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"globesourced.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}