https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fclient_id%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252F%253Fpostureless-deny-otp%26redirect_uri%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252Fapi%252Fv1%252Fintermediate%26response_type%3Did_token%26scope%3Dopenid%26nonce%3DP261005100753636DUB5VC1D37UNOAZ%26state%3Deu-west-1_P261005100753636DUB5VC1D37UNOAZ_8d69ed42-1d72-4ec7-adda-a6f8975f251d&require_digital_identity=false
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fclient_id%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252F%253Fpostureless-deny-otp%26redirect_uri%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252Fapi%252Fv1%252Fintermediate%26response_type%3Did_token%26scope%3Dopenid%26nonce%3DP261005100753636DUB5VC1D37UNOAZ%26state%3Deu-west-1_P261005100753636DUB5VC1D37UNOAZ_8d69ed42-1d72-4ec7-adda-a6f8975f251d&require_digital_identity=false
- Submitted IP / ASN
52.94.218.63 AS16509 · Amazon.com, Inc.
- Final URL
- https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fclient_id%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252F%253Fpostureless-deny-otp%26redirect_uri%3Dhxxps%253A%252F%252Fidp.federate.amazon.com%252Fapi%252Fv1%252Fintermediate%26response_type%3Did_token%26scope%3Dopenid%26nonce%3DP261005100753636DUB5VC1D37UNOAZ%26state%3Deu-west-1_P261005100753636DUB5VC1D37UNOAZ_8d69ed42-1d72-4ec7-adda-a6f8975f251d&require_digital_identity=false
- Final IP / ASN
52.94.216.111 AS16509 · AMAZON-02
Final page
- Page title
- Midway Authentication Portal
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 43.0 KB (44059 bytes)
Detections
Activity
- HTTP requests
- 18
- Observed hosts
- 4
- Script records
- 1
Estimated HTTP data
- Sent
- ~67.2 KB
- Received
- ~2.34 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| dataplane.rum.eu-west-1.amazonaws.com | 433693 | 2005-08-18 | 2021-12-02 | 2026-10-04 | 10.4 KB | 1.7 KB | ||
| unagi-na.amazon.com | 3905 | 1994-11-01 | 2016-04-20 | 2026-09-28 | 1.1 KB | 1.1 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | |
| midway-auth.amazon.com | 294385 | 1994-11-01 | 2017-11-29 | 2026-09-22 | 21.2 KB | 2.33 MB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Ruby on Rails Web frameworks Ruby on Rails is a server-side web application framework written in Ruby under the MIT License. Ruby Programming languages Ruby is an open-source object-oriented programming language. | |
| cognito-identity.eu-west-1.amazonaws.com | 44331 | 2005-08-18 | 2015-03-08 | 2026-10-01 | 1.2 KB | 918 B | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |