Report - amazonyogesh.pages.dev/

Report Overview

Submitted URL
amazonyogesh.pages.dev/
IP
172.66.47.198
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 16:56:44
Access
public
Website Title
Amazon
Final URL
amazonyogesh.pages.dev/
Tags
amazon phishing
urlquery detections
Phishing - Amazon

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	1.0 kB	177 kB	104.17.25.14
amazonyogesh.pages.dev	unknown	2020-09-02	2024-03-04	2024-04-08	6.0 kB	367 kB	172.66.47.198

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.
2024-04-25	medium	amazonyogesh.pages.dev/	Amazon.com Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (15)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css

104.17.25.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18861 bytes)
Hash
9402848c3d4bbc710c764326f8b887c9
b6e555166eb1381392e00adcde9bf8863f16ff01
c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7

HTTP Headers

GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amazonyogesh.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: text/css; charset=utf-8
content-length: 18861
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65692999-49ad"
last-modified: Fri, 01 Dec 2023 00:32:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 72453
expires: Tue, 15 Apr 2025 16:56:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pp5ufUOtMDpwCBHthqJTRZlWh0JZLW747p%2F6TpgIh21mmMofCI8UEH4FREdeFHqpQwXTeUCc4Kd%2FJg6xYQ6nq06WtnFZmrAaM8NoRzUB%2B4ac0IcbloBoYiDe8nuNXhsD0SAHcNFU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879fdd94dd4a568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2

104.17.25.14

200 OK

156 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 156496, version 773.768
Size
156 kB (156496 bytes)
Hash
6c4eee562650e53cee32496bdfbe534b
1aae708e3b94ee981b452a918d28ed037fbb5e18
9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2

HTTP Headers

GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amazonyogesh.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 156496
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "65692999-26350"
last-modified: Fri, 01 Dec 2023 00:32:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4123939
expires: Tue, 15 Apr 2025 16:56:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94tfYhOWxnacXwMs8vdBgm6lvb7o4XcRU8u7xPX%2B%2BMqJRkXD9%2B69Kg5pLKDk4jAjDI1ti58XGV0QG0AdGMNKoF8hxMynVgr1zk%2BhWWSwSPm%2BvwFFGHLunW9nSarUqx2BZUpJ%2BS4T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879fdd95be62568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

amazonyogesh.pages.dev/image/amazon_logo.png

172.66.47.198

200 OK

85 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/amazon_logo.png
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Size
85 kB (85040 bytes)
Hash
1b81758b8d98f363ae1dbf228ca4dbc9
a4d73722eb01a9348b9344fcc456a36c9f392f7e
9070babbf89650d2afb0f12e795cccd69a6d5abaa0c7a6682ce891e6d68c2ac5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/amazon_logo.png HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/css/style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/png
content-length: 85040
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "219ddb16fc2cce77860f45d9e206d8e6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVdB3Kuiw4RDj46XtFbTdw2of%2BeRN6DrAX1Mz4B7UghBsD0W2pjhG5433pQr37%2FJJfmYndxZReKLU9IyZimQzNCthQcweqQS7HrSb5613xhHPtOLr9KtjlWJmIlQCI%2BVw8%2BUiAM4zHga"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd957bc60b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box2_image.jpg

172.66.47.198

200 OK

25 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box2_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3
Size
25 kB (25230 bytes)
Hash
1933456391a4a87aa87841e6eabf0ec8
7dbff25dd4d2279dae10021aa9bbcc4979ba81c2
e7da51c1bbe9e31647c1bbc9b2c63a41c60994bb369db30b00bb85aa55cc106d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box2_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 25230
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2cae04badbbd1e92f5a4e525309520a0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e7OEbGwjO2L5G69R3V%2B7Yys6%2Bjf16cRNWo89aPeAOS2UJs7OKQRdWhR4MTGbrxr%2F6C9JA29eodQ9PmCTCv0%2FdkS%2BDhYF0R6qn%2BssiFmnlEhQ6qxkGEwzK83r6atCltjZ%2F6xSpyLtWZCl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd958bdb0b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box1_image.jpg

172.66.47.198

200 OK

11 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box1_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 372x232, components 3
Size
11 kB (10576 bytes)
Hash
e35985f99b9a371c34a546d51d3e6e97
c1966756eecfbc8ed3f8e026368ee05227fe92d6
62134052cff0396b3c5cd9c060143843553af0da5f917c5d74a9264043fc9b75

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box1_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 10576
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "74e202a82a81fa2f25193711f5b59338"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuzYWw81QpNFUUqIZgoS2hqRjV0I8P8zfGdT%2Fz%2FjpPtEFX9zJcGD%2Fc6d%2BtsvbbH%2BBWKyAh3siykJIP0L7yWQQJM%2F0zV8%2FfrjIM16uuRMxJz4Xtuu%2BC9eN4h2gKcSlj6UYRUwZdODPi%2F5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd958bd70b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box3_image.jpg

172.66.47.198

200 OK

9.2 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box3_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 372x232, components 3
Size
9.2 kB (9217 bytes)
Hash
ff02d68c0a2abf606eb605ad14f259b4
f92ed0338ab48081cb7d52185b2c78c2c2dde651
b15a8dcdbad38282705cae52a3dd81d1323506ccfe9a5b2a3764d4fa24139581

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box3_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 9217
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c2c4b116f976d43d690471be410adabd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tc%2BoIbXW2hsQJITEldJ3Hu6Ox%2FU78VQbM0dkuQpMtelNz3HCBJgl1chTozBvmaVoDswkQ8s%2Fhj%2B8r5ZP7XFGhx2BzfYMzgZS6leAB6Z0OqzOKLoZ4bUK0%2F9%2FqhBvrKiNPLxX3JFF4tkb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959bde0b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box4_image.jpg

172.66.47.198

200 OK

11 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box4_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 392x400, components 3
Size
11 kB (11258 bytes)
Hash
d164fe77224ca4a86c5aca1095de7ea9
6419df29c429b1a12fb277662dd8275871156eee
38125858a70b589ac578fc7b15c3bcd4886b7b79a467c9d823ba4f1ad62bb2ce

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box4_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 11258
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ae424c491f2ce2e084ede806c3a9ec2f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tt%2FC3XkCrVh%2BJjpSO7ASNE8FZw75e%2FdVZm%2FrlkB%2FrzR9I%2FXKb559n4fwYhVDzF9C7ZAf%2FsMSvNIzCV39kG7BeZeKzszw2jp8fxKQ7z95%2FDNM00nHVAiFfl9yHvZy%2FeriEEGm0oeqkm9D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959be10b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box6_image.jpg

172.66.47.198

200 OK

35 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box6_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 758x608, components 3
Size
35 kB (35229 bytes)
Hash
8580484850d0b5c54e03bbf66c1b5060
6ae744e6a970b96bb6d00c49983607d205df6d25
b77b487d0d7fab9f3c84027a1ac2a8664d3e43ec836204e2e7e55cefa6b2bc4c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box6_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 35229
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4b3f50477d62105c5fc49a6c1425843c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0e5Y%2BKA0KZV9eV1fw47JWbDF1WsQZNZATuW4cHQMzKO32ZsI1URe0Z33Ttr%2B87vnCO%2F%2BY6MoLUV7wioonpq8KdzrQNp9u1Kx6oOKFWtFVMYN7w2lt76sxw90EmFrKsNU0zKNpKcbvPvR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959be40b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/hero_image.jpg

172.66.47.198

200 OK

69 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/hero_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x1200, components 3
Size
69 kB (68711 bytes)
Hash
29467d4f3bf6a7d96f02cf4c32ce80ac
432e5f4121e1ab2dce9821a988296c4db0c17fcf
85e06bc4bcf17bdf5991bd16f338f789142b6db6b8cc01714659f7ce33ef1b49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/hero_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/css/style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 68711
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "86bb9d27fe5fb038dbf2213b80836d5c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yb9Y0kINfzHqlbDpCDgXMUg%2FYlzUfjuK7zqqkkNjgpIzI52cdTdMUEqun7KTV9V2GhzbmXNL6Hq7tKt9FWynkkPrAsxFob4%2FsRKnunGMrWfMweYViNhOFVekKv%2Fe0a%2F%2FCJJHbo04Tnpt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd958bd00b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box5_image.jpg

172.66.47.198

200 OK

32 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box5_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 758x608, components 3
Size
32 kB (32009 bytes)
Hash
739f23f6eb5c2a63e2f1944de74445a4
57d541c0fdc6bd80d7bc7cc889c9f55921ae1e0c
218cc9c02a16b4a18e826f4b89cce7ae1535098f3b9d950f976c0804747767d2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box5_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 32009
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "92e65e80ba304ae3be37386c0f4c4c7c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wi7%2F02kV7yL0iYRedbepkOFZs8NPyFCE2RWNXxR9rAPBO3ovX9XLioKnHPvhSQ9nDz%2BNu%2F1j9A7wL6THepWF%2BlCjE1sZKmLn%2Fnj59u%2F3yElqamZDg%2BS4c4Ueif4Qykdj59vYnbPRMo0r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959be20b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box7_image.jpg

172.66.47.198

200 OK

41 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box7_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3
Size
41 kB (40552 bytes)
Hash
30e03f5543e0c9151fef571d6849dea3
6e34f9991c12464cec8df825a3fb528b113ef1d7
cc27babb2dc500c80ebb0204df15243529f3a940eadaf5410930d5e9e1cd8cc0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box7_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 40552
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4bc6228ee988ac733157517d8bb69834"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uZm5Hpf6rm0OIiBX%2BXLvo9gW70g1pmiNEMtAmNkxVjy0rJcjSJPnfnHdg6G5diTkhuNdWidltB%2Ft8o1g6j%2BlhptTrFoYWful2Kwv4zYXLd2XS2B%2FaCzFT%2BkIUu7EIF4OFPISDTsmxScW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959be80b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/image/box8_image.jpg

172.66.47.198

200 OK

23 kB

URL GET HTTP/3
amazonyogesh.pages.dev/image/box8_image.jpg
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
JPEG image data, progressive, precision 8, 758x608, components 3
Size
23 kB (22752 bytes)
Hash
f535d9bb8ceed1b4de49df0c349387c2
85fae3143813f9bc4be2764a359209ae759d1bf7
c026afaf46843864f0874b4d6fbccbb3152cb0281f98afdd4dc88250fbbc0186

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /image/box8_image.jpg HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: image/jpeg
content-length: 22752
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "1d627cab22a9cd150c18bae79538b73c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oEQ9wg2LJ1hDe%2FEPepmv9IBYjXgXaL00k8JF87h%2FneYeyI6dAHtVAdiDkOViAR%2B69dRttjYh1TuTApwzjkueQ1HmV81thUUhTOfXBuNcYL8q08sCU%2BM7wh1j6sxvcqSwAursuDNWopMr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd959be90b65-OSL
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/

172.66.47.198

200 OK

6.2 kB

URL User Request GET HTTP/2
amazonyogesh.pages.dev/
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6766), with no line terminators
Size
6.2 kB (6219 bytes)
Hash
d5604900d023e9bc07f3ea299e34cf63
1a3271b8f3fbe5e2f17cde8282de6c6f2b435ee5
416b521f3b140844bdc058f94d32130254ddb4b964339e28c9a108c90482f304

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET / HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a30f781cc1f3e04a9b324e289e046b6d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8HxnPRQB9Dqh4xIAPjWjgNQ9W%2Fa6liLpv%2FU5P2NAfLHNK8JQo%2Bqtig%2BufvdEwfGM2s7kbFKG7vUxynKU8ajkj8dzyUo%2BOK%2BYBWTdS0%2FAmPCRRo2ocSmq24e2W8FsdNIMwF5SvIsD6v8m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd928da456ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

amazonyogesh.pages.dev/favicon.ico

172.66.47.198

200 OK

6.2 kB

URL GET HTTP/3
amazonyogesh.pages.dev/favicon.ico
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6766), with no line terminators
Size
6.2 kB (6219 bytes)
Hash
d5604900d023e9bc07f3ea299e34cf63
1a3271b8f3fbe5e2f17cde8282de6c6f2b435ee5
416b521f3b140844bdc058f94d32130254ddb4b964339e28c9a108c90482f304

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a30f781cc1f3e04a9b324e289e046b6d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8iPC2kNPamPreBefMZA4RUDDkgtiUiqeKvNACKafQXB1Gzyv%2F985js3vTCA52dYO9PVxB0foKgNmpuTmRYQCOuh1BMG4VeiT1XEX7u7Z%2FcTy47Tsii9hoAruMDlpvoGwhroQMdpLlp2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd955bb60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

amazonyogesh.pages.dev/css/style.css

172.66.47.198

200 OK

4.4 kB

URL GET HTTP/3
amazonyogesh.pages.dev/css/style.css
IP
172.66.47.198:443
ASN
#13335 CLOUDFLARENET

Requested by
https://amazonyogesh.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectamazonyogesh.pages.dev
Fingerprint08:CA:39:DC:BE:D7:48:2F:9F:62:E8:E1:9A:4B:12:1B:86:54:70:5C
ValidityMon, 04 Mar 2024 17:29:22 GMT - Sun, 02 Jun 2024 17:29:21 GMT

File type
ASCII text, with very long lines (4918), with no line terminators
Size
4.4 kB (4418 bytes)
Hash
221507fc7c67dee0c1dc07aa0638f109
2c91c2eae1dcf24815868d36858ed56365c4d752
08c0472cb2cd1029c2a225fc350caaf3ed8f73c2a01f8ea708dddcc1b9ca42d8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /css/style.css HTTP/1.1
Host: amazonyogesh.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amazonyogesh.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 16:56:17 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"029bbb3d91ae99461e818641ca0dc6d2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=USBX5pOzd8QHBM8%2FWauK6ptXL96LrmlGHLNRHcQo5ty86Vq1iJLvrC1yqlwSndwPVZNJiFEAkuys3FwRa7%2Bou%2BkBjaNp9OT6Fy9EOmMssAleTupeY7%2BxJtZyLsQ6UbVztsOJICsu%2B0Im"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fdd94bb570b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (15)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate