{"report_id":"1a7a143b-dfc5-4368-8c01-4983e5c2e447","version":6,"status":"done","tags":["amazon","phishing"],"date":"2026-03-03T19:39:07Z","url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"3.173.161.62","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"title":"Amazon Sign In","dom":{"size":25992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9825)","md5":"37e539708309b2a1363c040c85129a83","sha1":"30954d7a5d78b4a72b1f449990fe47812979493d","sha256":"50364bcb7584ec50edb20c044496f5a00eddf63e03cfa96fb5bf201bc0b7262d","sha512":"7ae0b2aac62e4709c0eac01a1b93ca93c6f6838ea25d9b5c6f346c3158ca793fc8647be90808174d52f3280491f8f984977816bbaf1b892dc9095944c4f243a3","ssdeep":"384:2rzSrwECkqrJk7TfkjVaFe3ULffBxJbkZfeNZySG+IvrTLic:2PScra7mVhULfTGNB","tlshash":"17c2060010f30a76164742e577a97b0f6ba0d5038a5a8f14b6fc03797fe7d966c2b2a9","dom_hash":"domhash960424ccecbd3ff25a553e143dc33e4c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"3.173.161.62","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T19:39:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"amazonwebservices.security-unauthorised-request.com","ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-09-20","domain_rank":0,"first_seen":"2025-07-14T20:42:34.576608Z","last_seen":"2026-02-27T13:09:02.384296Z","alert_count":48,"request_count":8,"received_data":485422,"sent_data":5404,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/js/common.js","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4055559d986bb83ef861fea98464e81f","sha1":"5d0344bb39419349124d250d323d8ff93f022f1c","sha256":"a02f4c009d085355be3f332b7b4440b2cc168c7a69452e52caca1472dfb1cff5","sha512":"de36606570e3b3c58e02065f9a8d7c28a06090871b58e4ab6964799bf3a9decb12e4a3dad47d8c3d847f3ebd2f2a0b6d1283e57e5f7aaccbd723f9cbd9733cd3","ssdeep":"","tlshash":"0e51fd2a30b751f045f7049c6b8bd261613a14633589d989f69d4f891fcdf2ea0a37ce","size":3114,"data":"","first_seen":"2025-12-13T04:30:56.914064Z","last_seen":"2026-04-05T21:29:52.383487Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ec370ca0eaf3069dce13df24243d863","sha1":"64c1919bbb18a6d851d1b7772f830320b8ab5cc1","sha256":"6a31a3a39783d09cc53dd9e9baeb4a4fa49be602eef90f6bbb9f78af02688064","sha512":"c24d4cfa5facd73ea7c242f69d6591d785bdbdca73bfc6aa7afe963bf09d4350a4daf0eeeb7ccd482b02d807663cf5d1c6763f0e2e468d8fda9f11213627d49d","ssdeep":"","tlshash":"6290040100513554711530d00134c3dd557df075dc4dd335754f570040c0405c53c401","size":41,"data":"","first_seen":"2023-03-07T01:02:03Z","last_seen":"2026-04-06T06:29:59.646565Z","times_seen":17257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b398daa4f193c9d85d58de00a357b73","sha1":"46f9e8d8488f1774cbe8adc0545d8e2709625cad","sha256":"a8589784d8ac9bbb7b7fa9a3d3952e744f1a6dea1b4d4dca5c3f13f2b4b36393","sha512":"4a19d7d8d8029e3af15e51d6299bd60b266703c1227defbeb64efd53097b522851d3d0a0a53a22b7e353f58094b82ef4037ac80b07816e321755aa42eff7200d","ssdeep":"","tlshash":"6451ce9911fb66b50e16a6bc23cfa20372f490031d09c908793d471c2fe4e9669f5be7","size":2870,"data":"","first_seen":"2025-07-14T20:42:37.49794Z","last_seen":"2026-04-05T21:29:52.385143Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-04-06T08:20:49.834222Z","times_seen":16967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/fonts/AmazonEmber_W_Bd.woff2","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:48.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/fonts/AmazonEmber_W_Bd.woff2 HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/AuthenticationPortalAssets.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 65400\r\nx-amz-id-2: b/t8/qogkjoitnf9iYIFysIu3c6BSuvrXcWvayQBxYxaU2EZCrJspdHIqKi6rcVmBDHfx0jXXTs=\r\nx-amz-request-id: DG8S500KH3XBM9NN\r\ndate: Tue, 03 Mar 2026 19:38:49 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"68658972cef5823aaa45770ad15df48e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7sJsiFgohzYFdfWyf-Tekh-fPB3aoKo7BhC0FPsmAXYCfsEXq-Sr6A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":65400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65400, version 1.19661","md5":"68658972cef5823aaa45770ad15df48e","sha1":"b7b102c865f7f9fd7e161bd6795147421a8e6cfd","sha256":"fae8d9892169edc72006fbc01c8a55c20c98ddd38f1fb927e817d290f398ca92","sha512":"59d3991f1f4b1d53ace39e1b9c00e3c66dd6eb4a7c5e19f7168ea2c8ba401264a650b2cdff859566c51e5f12c773bce63f8d33a7abf48b888e0be6c4bf87eff4","ssdeep":"1536:msfO1TqlmnlfgjCcFQkk7wd6sX37kbV4AKB:nfOclmlo2cFQkk70Y4VB","tlshash":"c353029ec75990f5f0b58e3a0d345202be3add8cd57048b46f64c94ca427a7f274295f","first_seen":"2023-04-14T15:00:27Z","last_seen":"2026-04-05T21:29:52.377793Z","times_seen":845,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/images/favicon.ico","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:48.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/images/favicon.ico HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 17542\r\nx-amz-id-2: pIbiOJb4FSwvIPqD4bO0WC9cwaJOiqXXk1iNEOddMcFmV6otl8olLVtYCXxv7eZbq+KtWorJa5DrmEjbYN75S79W10Z8CXjL\r\nx-amz-request-id: PQHMF7R09X97J4HC\r\ndate: Tue, 03 Mar 2026 19:38:50 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"ca6619b86c2f6e6068b69ba3aaddb7e4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9EWKHBTZs3NGEkopIAKL0xUOWGWKJ8lMFcbI_wTkO-LspUtdNBo0Sw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17542,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ca6619b86c2f6e6068b69ba3aaddb7e4","sha1":"c44a1bb9d14385334eb851fbb0afb19d961c1ee7","sha256":"17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09","sha512":"30f8f8618bfbcd57925411e6860a10b6ad9a60f2a6b08d35c870ea3f4cec4692596a937ff1457ceff5847d5da2b86ceba0200706625e28c56a2455e6a8c121d3","ssdeep":"192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ","tlshash":"ae72f191ad68c084c37ef432dd69deab66467de2b6c26c071fb53f86f23821e7901106","first_seen":"2023-04-17T01:45:41Z","last_seen":"2026-04-06T07:38:07.679605Z","times_seen":15377,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":856,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/fonts/pDxWAF1pBB0dzGB.woff2","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:48.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/fonts/pDxWAF1pBB0dzGB.woff2 HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/amazonUI.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 16616\r\nx-amz-id-2: bKwTwgGBHNUbxidBCvLc7gEfG54HsrigDBa4OCGcG7ky7yIHo3HNu3sfjRB74R8UCDTfsij4pZKWl/jC4M4RIgXROVnw1Bph\r\nx-amz-request-id: DG8GZ6ZR2ZK2JMX5\r\ndate: Tue, 03 Mar 2026 19:38:49 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"4afcd3b79b78d33386f497877a29c518\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7Ew1mfQyN3HfgrU6jnlRaXSx9EOG-m7sC-cQZUoXJmcd_gHpPU4h2g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16616, version 1.655","md5":"4afcd3b79b78d33386f497877a29c518","sha1":"cc7ebaa05a2cd3b02c0929ac0475a44ab30b7efa","sha256":"cded49f94fc16dc0a14923975e159fbf4b14844593e612c1342c9e34e2f96821","sha512":"2dc9fff1d57d5529c9c7bff26fa9f3f94adc47e9cef51d782e55ecf93045200140706ab5816dfd4a0b49b8db2263320fa2f0fa31a04e12d0c91fea79b127255d","ssdeep":"384:0qJzQ61qLjMj2JfDC3uq2B/YgduJyovfw4TQRJGL7VGhX8aJl/hObP:x8LHMjGbCeqEFuBwkqJGLhGhVLsP","tlshash":"a772d03d74972759eac2ce7f720d228627d6f9888e615fe83817d00c657604e6a603ec","first_seen":"2023-04-05T14:54:42Z","last_seen":"2026-04-06T07:38:07.768774Z","times_seen":18372,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1059,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/images/ZpbG74laklgnz-i.png","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:48.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/images/ZpbG74laklgnz-i.png HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/amazonUI.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 22428\r\nx-amz-id-2: NfWK4ao3MrrVggPW3gLaIXPt5pDPE9qUemx1MTnNyQFQcARSfFsxMDH85onelFYnmoJaUySt1+M=\r\nx-amz-request-id: DG8N00W4X2WKTN5P\r\ndate: Tue, 03 Mar 2026 19:38:49 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"be418cbd22d8cd432fd8f3f6ae2abd76\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 46sjgelyUbM8IvjqkhX7Yxx1Ct71HBClbtjveHp6E6qpI-pk-yNeyA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":22428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 256, 8-bit colormap, non-interlaced","md5":"be418cbd22d8cd432fd8f3f6ae2abd76","sha1":"8a1eb36bda141942c27ce5f2586ccb5ee17a2da3","sha256":"f95648cd95b78de088904519725c67fff220f589dc045f19ffba21550450409f","sha512":"85a442470444250a639c86753f1e9d3dc8c308d9f173c250cfedacd8a1e16f4e3419da0c7a6f19695cf6d1c25964b54e4fee4193eed183b41c9e6043bdb827e8","ssdeep":"384:qlbGl6f7R7T7rLr3s96g/W1BapndUdH6Qu3pDm+RaHHhKTOl1uk5xs:Lm7R7r/3pWW6pnudH6Qu5CZhKTA0+i","tlshash":"59a2e186c604863cbc5af65b4b4d180817d10bbd0922b63efa7ea33951fded2615272d","first_seen":"2023-09-27T20:45:14Z","last_seen":"2026-04-05T21:29:52.379598Z","times_seen":533,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":920,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T19:38:44.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72 HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 28149\r\nx-amz-id-2: FDh4U/K+PcMbSZP7rQmqojmW21V97uXYeHxHG63APOiL6fPGqAoYC0k0l9FubyLdTlyYuLPWQRw=\r\nx-amz-request-id: 6G720A8JXGMM8NTM\r\ndate: Tue, 03 Mar 2026 19:38:46 GMT\r\nlast-modified: Tue, 03 Mar 2026 19:38:45 GMT\r\netag: \"7b131061e419b1845b729b1232be969d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\ncache-control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0, stale-while-revalidate=0, stale-if-error=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nvary: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: HR7mjhhxw1nqdA760R8pOQo04nVE3ya7VC_uPCPPEWOg5Bp7pVAe5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28149,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9664)","md5":"7b131061e419b1845b729b1232be969d","sha1":"f3e1048b13aaebcb588e8913d4906bd5eea82563","sha256":"f01dd3e0b61dd9e0371cc775a359824eb517df556fd9170ba1c7ad1cee6eb7ef","sha512":"eee5fcea343e8b5f48e85de8254fb31dea647ae35dfbc97ee8b5b379c5ebabb421941255604e0c32d54832fbb4cb9d6475a667c0f6ec544e69f70b8d3508c4a1","ssdeep":"384:tsSrwKpoOdJk7TfkjVaFe3ULffBx1bkvfiNZySG+IvrTLirM:tsSvda7mVhULfTynB","tlshash":"fec2170015f306b2564742e47baa3b0f6aa0c503c64e5f09b5fc43786fe7d96a82b69d","first_seen":"2025-07-14T20:42:37.48997Z","last_seen":"2026-04-05T21:29:52.382271Z","times_seen":75,"resource_available":true,"data":null}},"time_used":1752,"timings":{"blocked":335,"dns":30,"connect":1,"send":0,"wait":906,"receive":170,"ssl":308},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/amazonUI.css","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/amazonUI.css HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 257614\r\nx-amz-id-2: Pd3Wa8e7lQxv/GythJamjKIJb72eGLOCPZSU0rxfiflN17zmTwS7XbPxftG+Qh3IXBXjzoKeqAsihbFUQVu/LPVllDaPRbR5\r\nx-amz-request-id: TSBTDY8REWY35AC1\r\ndate: Tue, 03 Mar 2026 19:38:48 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"565bb1a441c46f41c92a794573fffb56\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gXQcF8VwxT0OWPoo4BJT264K0WgS7A6Qaj6EuxG-UYSGoQF_BaJ4xw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":257614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1850)","md5":"565bb1a441c46f41c92a794573fffb56","sha1":"6a16e4f323ffa24f24e29f188fdbeb612fc88bd9","sha256":"0b48b65bbcd0d22bda3d92f0317052c46788ba260c1725ef0fa289e6a020f98e","sha512":"1ea4b80b7628d841f0657da5ce4b7796e3453b9302e53d8f1bd023ab4a3a05848db9294622c83cfda138631d0e44352b442e46e44c129346a1a5fe230ec96f0a","ssdeep":"3072:+vC92UBb4uk1YIIP1CuZ4sLIG1xCnWTq7KeDmacCoWvxEy8w8mSanA0lt:+vC9/eDmacCoWvxEy8w8mSanA0lt","tlshash":"ef44a8c256922f5fe72bc39193ee2654b31951c3c71a9c683a5e31c85fca1c1f029f9a","first_seen":"2025-07-14T20:42:37.494598Z","last_seen":"2026-04-05T21:29:52.382852Z","times_seen":75,"resource_available":false,"data":null}},"time_used":1802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1112,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/js/common.js","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:46.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/js/common.js HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 3114\r\nx-amz-id-2: vEPoWgt61JN8YSKwKvdKvCrpxmS7pmRTbgrBtkPoLd2cO3eYSqgMqWDfRmBeqVrlfbYIhrHf8ZX8WGysBt1OHCcEzoP9D27E\r\nx-amz-request-id: YSEKDGD6BXW3ZY17\r\ndate: Tue, 03 Mar 2026 19:38:47 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:44 GMT\r\netag: \"4055559d986bb83ef861fea98464e81f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: iiw6LgdRpY-Ko6CvSXcvBWXcuZCGgg6FAuzgxEPnqbycyj-S3aUDzg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3114,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"4055559d986bb83ef861fea98464e81f","sha1":"5d0344bb39419349124d250d323d8ff93f022f1c","sha256":"a02f4c009d085355be3f332b7b4440b2cc168c7a69452e52caca1472dfb1cff5","sha512":"de36606570e3b3c58e02065f9a8d7c28a06090871b58e4ab6964799bf3a9decb12e4a3dad47d8c3d847f3ebd2f2a0b6d1283e57e5f7aaccbd723f9cbd9733cd3","ssdeep":"","tlshash":"0e51fd2a30b751f045f7049c6b8bd261613a14633589d989f69d4f891fcdf2ea0a37ce","first_seen":"2025-12-13T04:30:56.914064Z","last_seen":"2026-04-05T21:29:52.383487Z","times_seen":93,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/AuthenticationPortalAssets.css","fqdn":"amazonwebservices.security-unauthorised-request.com","domain":"security-unauthorised-request.com","tld":"com"},"ip":{"addr":"52.84.50.103","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72","date":"2026-03-03T19:38:46.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-management.net.au","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 27 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:6B:F7:7E:E0:02:F5:7A:57:AD:60:BA:51:01:90:09:4F:C1:77:8E","sha256":"89:7E:B8:61:12:36:0E:E4:44:55:89:43:7F:D7:2B:5F:63:5F:BC:B4:14:D0:ED:AB:26:A1:55:54:42:71:DF:47"}}},"request":{"raw":"GET /login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/css/AuthenticationPortalAssets.css HTTP/1.1\r\nHost: amazonwebservices.security-unauthorised-request.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazonwebservices.security-unauthorised-request.com/login/Mgk-WCxcfmgseLHDblkV8Onp_5Wk9ykC3UkY=2Aw==2U19TSF1cbV5dVVtc/U5vi3iQc2ZYY-EdD-wtEnZbBycRD5f72\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 69321\r\nx-amz-id-2: RUZL0yOR6cerGgyKGHELpLSUvYlEvgMgZjtkSmfLOVILQtR7eRBQjR2GYFPI7aLELG102ehUrT+SiQooe6xqbg0lOV2sJ+nr\r\nx-amz-request-id: YSEHVJ53ZPY450M2\r\ndate: Tue, 03 Mar 2026 19:38:47 GMT\r\nlast-modified: Wed, 10 Dec 2025 04:48:42 GMT\r\netag: \"45a35e09b9f6555345e79be8382fbb6b\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wBZ7UFvlNYWgxbtsC1XrZN0x26qYOF8WB8ngPzoBdEkPw0M9ve6Ohw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (508)","md5":"45a35e09b9f6555345e79be8382fbb6b","sha1":"d57c66a37fd612dd9ed417c5d90713d5a88e858d","sha256":"18e0e972939abee09ccacadd8a535d64cc7e7ed10809db7adfe965f4f00d206a","sha512":"79472dd5362ad0394ee68f68f4a214fa6c4874eb9c74a3cf547b64d67fbfb1e5405b10309724c00ebbaca15e722ab4c5765df15803974196a99a380bde6c6ddf","ssdeep":"768:FulD//JuRunTJNzoBjCrJZFRpJA7N24oPmf1Fza+yTWo:uD//JuRunTJNUBjCrJZDpLWo","tlshash":"6f63df61cb932d9ff91bd220717a26e152361183d85b4ead369a37d82fc69e0c433db4","first_seen":"2025-07-14T20:42:37.492284Z","last_seen":"2026-04-05T21:29:52.378869Z","times_seen":75,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":906,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"amazonwebservices.security-unauthorised-request.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}