| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css |  104.17.24.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css IP104.17.24.14:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hashded1c367363e8b20bdc6a19b8350a737 8c06d82739d14b094ff6d9036021a252bd1d985d 1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf
GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amazon-am0.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 61378
expires: Mon, 28 Apr 2025 17:30:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJ6%2FfHIuV6wc9hz0ea8EIGumsGZN4hEO8cxL9DE4Y5erWHov3qYR0YF24MGAgG1EgRujvBmw68I%2FLhngNHJqmFAplEklbw%2B07%2FTuwPKxQRbUdnTyqyUIgphN3OoUv7T7ceBvSZGe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b2d34bc9156c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 150 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 IP104.17.24.14:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150124, version 772.256 Size150 kB (150124 bytes) Hashc64278386c2bbb5e293e11b94ca2f6d1 6b99aa650bd12a36caa14e0127435d8f4cd3ba73 7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880
GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazon-am0.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 150124
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6421d693-24a6c"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 57407
expires: Mon, 28 Apr 2025 17:30:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mFuD%2FF5f0i%2BWkiG1vrV4kjoKojQRK9dk8bBUVLDQnSWcLZNLp8ihoKUzj9yvLHqHVDHGTWI%2F0t9FxOCOQrSbGCxrFzp4TyVwYtsIFLYj%2FNOJW%2FsVd3zTI1%2BraGMc02p6ceJJlFIi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b2d359dff56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| amazon-am0.pages.dev/amazon_logo.png |  188.114.97.1 | 200 OK | 85 kB |
URL GET HTTP/3amazon-am0.pages.dev/amazon_logo.png IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Hash1b81758b8d98f363ae1dbf228ca4dbc9 a4d73722eb01a9348b9344fcc456a36c9f392f7e 9070babbf89650d2afb0f12e795cccd69a6d5abaa0c7a6682ce891e6d68c2ac5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /amazon_logo.png HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/png
content-length: 85040
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "219ddb16fc2cce77860f45d9e206d8e6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8c36JcBdjuAR1BJUZBLSxrn0lzqZutLnUXb1%2BBbMw3VSkYt6LsmyiIv%2FWCWnyAi1HGgGWVONphI%2F3cicphOXk2DCdOkhtaMH7kPaARH6VoYtfkbeJ%2FsB38%2FM%2FepL4xDwQJZZlwDwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d355d060afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/hero_image.jpg | 188.114.97.1 | 200 OK | 69 kB |
URL GET HTTP/3amazon-am0.pages.dev/hero_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x1200, components 3 Hash29467d4f3bf6a7d96f02cf4c32ce80ac 432e5f4121e1ab2dce9821a988296c4db0c17fcf 85e06bc4bcf17bdf5991bd16f338f789142b6db6b8cc01714659f7ce33ef1b49
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /hero_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 68711
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "86bb9d27fe5fb038dbf2213b80836d5c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i8ptuY5QJ0zqe2ElEatCIbcIQxdEfyCMpiN3996%2BNYO5FOqmAYR31ttAzDHzRkWPBwPHVr4QXsAfJdstzsLvV0KBxckcxUSPzqCyCf3%2B%2BOUnYoJShacHv8lavN7HVaf2YrkDoYXGsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d356d130afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box1_image.jpg | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3amazon-am0.pages.dev/box1_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 372x232, components 3 Hashe35985f99b9a371c34a546d51d3e6e97 c1966756eecfbc8ed3f8e026368ee05227fe92d6 62134052cff0396b3c5cd9c060143843553af0da5f917c5d74a9264043fc9b75
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box1_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 10576
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "74e202a82a81fa2f25193711f5b59338"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aGz08ojPVDV85eLC9kpgFLVJQx4x42zdn9OMOR0LIHLJIoYQhn5JHpzjv438FeYTJWHl1u0yjOhfam1v5yTtKJpVtCrmU%2Fy8IRbSQ%2FQNpVQrlLFjDyE0Pb8oveD6x%2FovyiFCtY9Vcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d356d150afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box2_image.jpg | 188.114.97.1 | 200 OK | 25 kB |
URL GET HTTP/3amazon-am0.pages.dev/box2_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3 Hash1933456391a4a87aa87841e6eabf0ec8 7dbff25dd4d2279dae10021aa9bbcc4979ba81c2 e7da51c1bbe9e31647c1bbc9b2c63a41c60994bb369db30b00bb85aa55cc106d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box2_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 25230
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2cae04badbbd1e92f5a4e525309520a0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3jN0esNDH9ZmluYNTgYmjKYoODZVeo8on%2FEmEKSTwHL5trCWNAbD5t55apuXsryJpWqdfID9Y8cViVkn%2Fw3bFhFd1l5gMXRtnz6ZV8HNAykkgubhlEV4DsXqbwDssCbY1EBS7GqFaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d356d180afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box3_image.jpg | 188.114.97.1 | 200 OK | 9.2 kB |
URL GET HTTP/3amazon-am0.pages.dev/box3_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 372x232, components 3 Hashff02d68c0a2abf606eb605ad14f259b4 f92ed0338ab48081cb7d52185b2c78c2c2dde651 b15a8dcdbad38282705cae52a3dd81d1323506ccfe9a5b2a3764d4fa24139581
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box3_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 9217
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c2c4b116f976d43d690471be410adabd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKbVDyoxI0wT6MnG%2B3L%2BSQYxIMiLxUjmcDBPwj7XVpr5aynzlyHimTU1vsgiSOaCKFN1T4A5mjAhoFqXOCI1b9Y0IDhZXan%2FpcvMtv0l2syBBMG2qy2YrpzGtkD7hklVkfDYn9fthw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d230afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box4_image.jpg | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3amazon-am0.pages.dev/box4_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 392x400, components 3 Hashd164fe77224ca4a86c5aca1095de7ea9 6419df29c429b1a12fb277662dd8275871156eee 38125858a70b589ac578fc7b15c3bcd4886b7b79a467c9d823ba4f1ad62bb2ce
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box4_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 11258
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ae424c491f2ce2e084ede806c3a9ec2f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m9Ptd8Bn0SoKUlgcDy6VNLnhVvAS8oCjCCM0jrxeMIqTPinsH5r7Rl5ZCp%2BgYys1UXOYaV0%2B296n8KaaolGeH%2FgpCfhAx7v9VM4ncyS6fMqhfCwpcDUvd95D8JB0fbA1woKCuDISyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d240afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box5_image.jpg | 188.114.97.1 | 200 OK | 32 kB |
URL GET HTTP/3amazon-am0.pages.dev/box5_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 758x608, components 3 Hash739f23f6eb5c2a63e2f1944de74445a4 57d541c0fdc6bd80d7bc7cc889c9f55921ae1e0c 218cc9c02a16b4a18e826f4b89cce7ae1535098f3b9d950f976c0804747767d2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box5_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 32009
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "92e65e80ba304ae3be37386c0f4c4c7c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yQ6qIaRxSmUA%2BwzkdUjacuAOzFsAXcE0d3%2FU2Tb41yECXJa53Sw3joBpE0J3H8f%2Fo6zDTSVGrBZnrPP4uiE6huSNRIdD6Dqjodn5y0TFRdxXY7HLLbPHL8rrlM4nk6j5yr4etrr18g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d320afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box6_image.jpg | 188.114.97.1 | 200 OK | 35 kB |
URL GET HTTP/3amazon-am0.pages.dev/box6_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 758x608, components 3 Hash8580484850d0b5c54e03bbf66c1b5060 6ae744e6a970b96bb6d00c49983607d205df6d25 b77b487d0d7fab9f3c84027a1ac2a8664d3e43ec836204e2e7e55cefa6b2bc4c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box6_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 35229
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4b3f50477d62105c5fc49a6c1425843c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QrBniuNGwAIBIxYpLraTx8JFJ42jii%2FEpjdTp8sIBoW0FH%2FDibdtivO4gxgFlQbns5dr9Q685lQMRw16nW43C%2FNMEwIQ5oHD8odBpLXIUSnwP4X071ifUfy8FqmVdNtn%2BbTYxHkljA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d340afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box7_image.jpg | 188.114.97.1 | 200 OK | 41 kB |
URL GET HTTP/3amazon-am0.pages.dev/box7_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3 Hash30e03f5543e0c9151fef571d6849dea3 6e34f9991c12464cec8df825a3fb528b113ef1d7 cc27babb2dc500c80ebb0204df15243529f3a940eadaf5410930d5e9e1cd8cc0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box7_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 40552
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4bc6228ee988ac733157517d8bb69834"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GOui1JJjcAbPRtzES6ba7mHwjf%2BTDim98C6NiKPEKaq3GItJX9jRO6zU7Y7jTXrCPbPKUcz6ZGItrzHH1vacguBdENjIn9O6XjoSQqVZXWOpq4X5c8JNJdVGHhFX2%2B%2FcZkNe4upuiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d350afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/box8_image.jpg | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3amazon-am0.pages.dev/box8_image.jpg IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeJPEG image data, progressive, precision 8, 758x608, components 3 Hashf535d9bb8ceed1b4de49df0c349387c2 85fae3143813f9bc4be2764a359209ae759d1bf7 c026afaf46843864f0874b4d6fbccbb3152cb0281f98afdd4dc88250fbbc0186
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /box8_image.jpg HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: image/jpeg
content-length: 22752
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "1d627cab22a9cd150c18bae79538b73c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JZruW%2Bhx0fEGYMUDhkt0o%2BOD7VrCaHNpcHyhkSf%2BmIUonT6ZBL1hXz6Viru06txd%2Bn9VWCgaQkH%2B5FMAj5zKImKr37kF%2BGV%2Bmv605mg3zZtJT4a%2F5OBYa86fIaIHp7e2gu2y2banoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d357d390afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/favicon.ico | 188.114.97.1 | 200 OK | 6.8 kB |
URL GET HTTP/3amazon-am0.pages.dev/favicon.ico IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeHTML document, ASCII text, with very long lines (7328), with no line terminators Hash70d38f55a9b590b53124e1696d442fe3 0c960d9c4abe29d19c958b65024b911760c75907 700b99f1c7fea9252ecc841f7badf208f4b6592dd3ef0e3f19351ce09de6051d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4c4a4112f4e8463f16e98a9ae3cd4c19"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nHlK4vxIlC9tjj2g9EaRgpc59qvpKGEXd6%2FxbdncCzjoKbWzOAZ9n08SaTrTvCc2ZyTQdD69pyNVzHLMJkJm8mw%2BEi1Qa1eqf1EwLLvuct1XjtoKYU%2FHPYb3l9dYDYMHV3Pkdy7HoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d355cf80afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| amazon-am0.pages.dev/style.css | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3amazon-am0.pages.dev/style.css IP188.114.97.1:443
Requested byhttps://amazon-am0.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeASCII text, with very long lines (4615), with no line terminators Hash1d51cd6181e0106e73becda524e9dfb6 a238503ad26683ef863a70202b3fcf87d2d1a213 b21edc29c97531a6fd73533d0f07573be8793e9a0f55412a545500b38cd14afe
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazon-am0.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 17:30:15 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"cc6bcc71162e07373d73fe5951be450c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4qQmMpMOj6zJ7MSpT6cXTxzDIN42VcuxqYYYtmkH79V3Escqi0HRBriu1bK%2FMWGG0IclKYR5wP5oFAkkBuCA2ftCZa4K8LBspD18U%2F%2FtG7fdWsqaavjBBIFLuuLP%2FhAEHNCdyfY9cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d349c0a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 6.8 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectamazon-am0.pages.dev Fingerprint7A:BF:D3:FD:3B:4F:50:11:EF:B6:35:0D:12:45:60:54:9B:9B:73:FF ValidityMon, 15 Apr 2024 02:47:22 GMT - Sun, 14 Jul 2024 02:47:21 GMT
File typeHTML document, ASCII text, with very long lines (7328), with no line terminators Hash70d38f55a9b590b53124e1696d442fe3 0c960d9c4abe29d19c958b65024b911760c75907 700b99f1c7fea9252ecc841f7badf208f4b6592dd3ef0e3f19351ce09de6051d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | OpenPhish | phishing | Amazon.com Inc. | | PhishTank | phishing | Amazon.com | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: amazon-am0.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:30:14 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4c4a4112f4e8463f16e98a9ae3cd4c19"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oYEOh6m6oSkIYaAUXj4L%2FDTko2j1vdG4%2F5j4B52I8UhbonvDuSl1LXVlSrqTaFoah5cjamKLnud7vM2ul89vjav7YGadxSTvYEaHOnpLaepqbJFzDH4WGXZrpb%2BdD2PwyZPY2BF%2Bkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b2d325e060b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|