Report - fdgchvjhkbjlkytu.pages.dev/

Report Overview

Submitted URL
fdgchvjhkbjlkytu.pages.dev/
IP
172.66.44.92
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 17:20:37
Access
public
Website Title
Amazon.com
Final URL
fdgchvjhkbjlkytu.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
images-na.ssl-images-amazon.com	842	2004-07-21	2012-10-30	2024-04-24	3.7 kB	100 kB	143.204.46.106
fls-na.amazon.com	1217	1994-11-01	2012-05-25	2024-04-25	967 B	475 B	44.218.154.189
fdgchvjhkbjlkytu.pages.dev	unknown	2020-09-02	2024-01-27	2024-03-27	930 B	26 kB	172.66.44.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	fdgchvjhkbjlkytu.pages.dev/	Amazon.com Inc.
2024-04-26	medium	fdgchvjhkbjlkytu.pages.dev/	Amazon.com Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js	7.2 kB	2023-03-07	2024-05-06
Pretty URL images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js IP 143.204.46.106 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-05-06 22:07:44 Times Seen952 Hash 1c399ad9886cab69575e1e5ee15c61a1 5b4a4fae777b5a20a6751361f0c64b9d590e37ba a538a2b295512c2a3b74f63e74047db79140733da941fb0fca2b95a1dfdada37 Loading...

	images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js	20 kB	2023-03-07	2024-05-06
Pretty URL images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js IP 143.204.46.106 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-05-06 22:07:44 Times Seen1309 Hash 64ee8d01bbfe60d6eff43818778fb34e 51171fbdd28e1a7a61e922e8f0272af8bc74d37b 877c2c2a2da0a1a6c0ad0d7ac8071046a1d726e5ab9c63509e3786b8c8ec5042 Loading...

	fdgchvjhkbjlkytu.pages.dev/	0 B	2023-03-07	2024-05-07
Pretty URL fdgchvjhkbjlkytu.pages.dev/ IP 172.66.44.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 07:03:23 Times Seen37396505 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	fdgchvjhkbjlkytu.pages.dev/	0 B	2023-03-07	2024-05-07
Pretty URL fdgchvjhkbjlkytu.pages.dev/ IP 172.66.44.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 07:03:23 Times Seen37396505 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	fdgchvjhkbjlkytu.pages.dev/	0 B	2023-03-07	2024-05-07
Pretty URL fdgchvjhkbjlkytu.pages.dev/ IP 172.66.44.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 07:03:23 Times Seen37396505 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js	1.8 kB	2023-03-07	2024-05-06
Pretty URL images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js IP 143.204.46.106 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-05-06 22:07:44 Times Seen991 Hash c2ec838fe27f97d3fd0074ce8bcaf9c3 87feacf794f2465e34a198f1243cfefdc428bc58 35cf72b3f65845c32617eb726119bbdd969738b7d62bb760c4381e82ce37ac4a Loading...

	images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js	1.8 kB	2023-03-07	2024-05-06
Pretty URL images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js IP 143.204.46.106 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-05-06 22:07:44 Times Seen1012 Hash 6d68177fa6061598e9509dc4b5bdd08d 3be11c9cf7d3fd0ec940798c3af6718e7db15e79 0a7e3153f44d0e51c73dad9fa3034a14446bedbafc38e477915382dd02269123 Loading...

		Size	First Seen	Last Seen
	#1 Write - 7644494b7607dcec9ddfbc64df064e05	89 B	2024-04-26	2024-04-26
Pretty Observations First Seen2024-04-26 19:20:37 Last Seen2024-04-26 19:20:37 Times Seen1 Hash 7644494b7607dcec9ddfbc64df064e05 275176cebea5af68c5cb0621a5fbe76220021548 39da4f45b08e0ca16ec11b9aa6b03d49d0feed5e44b40845911e39d9e7d884e5 Loading...

HTTP Transactions (11)

URL IP Response Size

images-na.ssl-images-amazon.com/captcha/huyzhwry/Captcha_crymjbcxuu.jpg

143.204.46.106

200 OK

5.8 kB

URL GET HTTP/2
images-na.ssl-images-amazon.com/captcha/huyzhwry/Captcha_crymjbcxuu.jpg
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x70, components 1
Size
5.8 kB (5791 bytes)
Hash
fd081350e859388eaf26fdc200b39074
5a8ecde3a427e8127226119122972359e1bfe564
c5399af0da19f16ab0b409ac1b16ad4433c86941709abe08854314c4669b497a

HTTP Headers

GET /captcha/huyzhwry/Captcha_crymjbcxuu.jpg HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 5791
server: Server
x-amz-ir-id: b6321fa9-4a4d-41a0-b757-cf26dfbceb49
last-modified: Wed, 08 Feb 2012 17:14:31 GMT
access-control-allow-origin: *
edge-cache-tag: x-cache-322,/captcha/huyzhwry/Captcha_crymjbcxuu
surrogate-key: x-cache-322 /captcha/huyzhwry/Captcha_crymjbcxuu
x-nginx-cache-status: HIT
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:20:12 GMT
vary: Accept-Encoding
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 32037
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6lg6I2GiQ51G5H4wDnu__-aPPd64l1-_UwUk4FHXavixC6C5VWhpRA==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png

143.204.46.106

200 OK

17 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
PNG image data, 400 x 600, 8-bit colormap, non-interlaced
Size
17 kB (16972 bytes)
Hash
7d7a0cfb8ec9eb548c63bfd8f743181c
76cab36d1597e40654951dec1be50c289252caaa
49ff798368f6e4367d03a44af687d47609ca4608d02b1a099281f88c910cf1aa

HTTP Headers

GET /images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/png
content-length: 16972
x-amz-cf-pop: OSL50-C1
server: Server
date: Fri, 21 Jul 2023 15:11:09 GMT
x-amz-ir-id: 6eef3435-ceab-4342-9443-c088d5a6e681
cache-control: max-age=630720000,public
last-modified: Wed, 15 May 2013 01:55:34 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-846,/images/G/01/amazonui/sprites/aui_sprite_0007-1x
expires: Sat, 04 Jul 2043 01:09:17 GMT
surrogate-key: x-cache-846 /images/G/01/amazonui/sprites/aui_sprite_0007-1x
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24199743
server-timing: provider;desc="cf",cdn-rid;desc="D3cQZz-i2e46Ub7031InNj2yQAApSJNjssS5mPolbGJwMVwJZubDRQ==",cdn-downstream-fbl;dur=2
x-cache: Hit from cloudfront
x-amz-cf-id: D3cQZz-i2e46Ub7031InNj2yQAApSJNjssS5mPolbGJwMVwJZubDRQ==

fls-na.amazon.com/1/oc-csi/1/OP/requestId=1G6HG71SS7RYQR7RVJ95&js=1

44.218.154.189

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/oc-csi/1/OP/requestId=1G6HG71SS7RYQR7RVJ95&js=1
IP
44.218.154.189:443
ASN
#14618 AMAZON-AES

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/oc-csi/1/OP/requestId=1G6HG71SS7RYQR7RVJ95&js=1 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:20:13 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 4dd50811-6d02-49fc-ac61-c56cc4c28922
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js

143.204.46.106

200 OK

14 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
14 kB (14207 bytes)
Hash
b637267e3758f4f4d07da62b9cd7ed5c
11713b9a81057052c48ace9f1f43066c2214b5bc
8b349db27034ec47e6702cbbfa3decd222bbc1b84ffafed34361928a4fe6b23b

HTTP Headers

GET /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
date: Tue, 25 Jul 2023 21:16:33 GMT
x-amz-ir-id: 844186c8-ef49-4ff6-b768-c5cf8919c236
cache-control: max-age=630720000,public
last-modified: Wed, 26 Aug 2015 14:52:49 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-438,/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
expires: Tue, 14 Jul 2043 07:39:01 GMT
surrogate-key: x-cache-438 /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 23832219
server-timing: provider;desc="cf",cdn-rid;desc="Ogkx05Hg8jfXvADx1mdf4HB_y2GJg9Dlhk7-MCNCgdTZardbHJLszQ==",cdn-downstream-fbl;dur=2
x-amz-cf-id: Ogkx05Hg8jfXvADx1mdf4HB_y2GJg9Dlhk7-MCNCgdTZardbHJLszQ==

images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css

143.204.46.106

200 OK

33 kB

URL GET HTTP/2
images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
33 kB (32903 bytes)
Hash
fb13bea3ffdf92f65746c371db7239f4
33c2bc503d090b37b205a645fc305bf8ff632fc5
1dc75976f4b6246cee21e4560689d9813a7cfb5c9e60e040021ee4f8325a8ff0

HTTP Headers

GET /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: Server
date: Sun, 13 Aug 2023 06:52:09 GMT
x-amz-ir-id: 3c9c4e67-95da-41df-8807-d86cc280dae9
cache-control: max-age=630720000,public
last-modified: Wed, 17 Jul 2013 22:49:32 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-109,/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
expires: Fri, 07 Aug 2043 07:46:12 GMT
surrogate-key: x-cache-109 /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 22242483
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GERJygobNije0SqEinM7j1chCZ_7tRAww6Od4p7KZYic4KpYhoiDUg==
X-Firefox-Spdy: h2

fls-na.amazon.com/1/batch/1/OE/

44.218.154.189

204 No Content

0 B

URL POST HTTP/2
fls-na.amazon.com/1/batch/1/OE/
IP
44.218.154.189:443
ASN
#14618 AMAZON-AES

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /1/batch/1/OE/ HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 20519
Origin: https://fdgchvjhkbjlkytu.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Fri, 26 Apr 2024 17:20:14 GMT
x-amzn-requestid: bdf16e18-03a2-474c-bd58-00cdd9c8ad3f
access-control-allow-origin: *
access-control-expose-headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js

143.204.46.106

200 OK

20 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (522), with overstriking
Size
20 kB (19614 bytes)
Hash
64ee8d01bbfe60d6eff43818778fb34e
51171fbdd28e1a7a61e922e8f0272af8bc74d37b
877c2c2a2da0a1a6c0ad0d7ac8071046a1d726e5ab9c63509e3786b8c8ec5042

HTTP Headers

GET /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
date: Tue, 01 Aug 2023 02:05:13 GMT
x-amz-ir-id: 4f24392f-1722-4ede-9302-b8a672ff834c
cache-control: max-age=630720000,public
last-modified: Thu, 01 Oct 2015 10:17:43 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-643,/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
expires: Sun, 26 Jul 2043 23:42:43 GMT
surrogate-key: x-cache-643 /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 23296499
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-C1",cdn-hit-layer;desc="EDGE",provider;desc="cf",cdn-rid;desc="93KLRgHT9WOi3FPfVSbL3_-TfC9aAkeQJuUbVQmpIjy8wehR8jnfOA==",cdn-downstream-fbl;dur=2
x-amz-cf-id: 93KLRgHT9WOi3FPfVSbL3_-TfC9aAkeQJuUbVQmpIjy8wehR8jnfOA==

images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js

143.204.46.106

200 OK

1.8 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1885), with no line terminators
Size
1.8 kB (1829 bytes)
Hash
554e3ca56fcbef44ead95bb2185e5907
7a479411ad04fcd58410c50dc69b81b7f390ad3f
31bf624bc6233d6049e4279e1d6b166fc58f97271d9935cb6b6025d151d581fb

HTTP Headers

GET /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: b62d12d7-7331-40ee-b9ac-911cedf2a8f9
last-modified: Fri, 20 Mar 2020 12:31:03 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-512,/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
surrogate-key: x-cache-512 /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
x-nginx-cache-status: HIT
content-encoding: br
date: Fri, 26 Apr 2024 09:01:24 GMT
cache-control: max-age=86400,public
expires: Wed, 25 Oct 2023 22:21:21 GMT
vary: Accept-Encoding
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 30024
server-timing: provider;desc="cf",cdn-rid;desc="5zAMU-5bMSgDylIkH5ydXh3ksLP11eBmkvR7wyqA1J1ZE6GbTJ_CWw==",cdn-downstream-fbl;dur=3
x-amz-cf-id: 5zAMU-5bMSgDylIkH5ydXh3ksLP11eBmkvR7wyqA1J1ZE6GbTJ_CWw==

fdgchvjhkbjlkytu.pages.dev/favicon.ico

172.66.44.92

200 OK

18 kB

URL GET HTTP/3
fdgchvjhkbjlkytu.pages.dev/favicon.ico
IP
172.66.44.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfdgchvjhkbjlkytu.pages.dev
FingerprintC3:BA:FB:23:F6:9F:C5:20:A5:F3:2D:7A:B3:B1:AA:91:0B:12:61:09
ValidityTue, 26 Mar 2024 16:34:03 GMT - Mon, 24 Jun 2024 16:34:02 GMT

File type
MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
18 kB (17542 bytes)
Hash
ca6619b86c2f6e6068b69ba3aaddb7e4
c44a1bb9d14385334eb851fbb0afb19d961c1ee7
17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fdgchvjhkbjlkytu.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 17:20:12 GMT
content-type: image/x-icon
cf-ray: 87a83dffca4a56cc-OSL
cf-cache-status: MISS
etag: W/"4486-490c87c5a6340"
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: h07UAIkg8gRssczpMGiboQxNs5VC4JfOVGCUc5mfxd3CvVrmqvWxrw==
x-amz-cf-pop: OSL50-C1
x-amz-rid: X0E8DK17RQ6CJ59PF6WX
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F3eJqFfya8TxtQV6cbuwMzisq%2BnYQxY4v8chjlKP%2Ba5UijEHQjNrtYBuMLu5LuIJRAEqP7zZg1WJ1dM%2B9gKaQH7RzLpJecKfDqw9mqKSU2UcQCOOJYiUo2RXhhBYzOvcAfvuO09lWGWIRp8SCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br

fdgchvjhkbjlkytu.pages.dev/

172.66.44.92

200 OK

6.6 kB

URL User Request GET HTTP/2
fdgchvjhkbjlkytu.pages.dev/
IP
172.66.44.92:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfdgchvjhkbjlkytu.pages.dev
FingerprintC3:BA:FB:23:F6:9F:C5:20:A5:F3:2D:7A:B3:B1:AA:91:0B:12:61:09
ValidityTue, 26 Mar 2024 16:34:03 GMT - Mon, 24 Jun 2024 16:34:02 GMT

File type
HTML document, ASCII text, with very long lines (6892), with no line terminators
Size
6.6 kB (6591 bytes)
Hash
299f3903204323172210a51c39b5b3a0
f1c05181af260eb1013f000d22a75fe68353013b
286f98301a138c193f517a17550dd3d44eeb0e3445d3825f22cdcb465054c66a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Amazon.com Inc.

HTTP Headers

GET / HTTP/1.1
Host: fdgchvjhkbjlkytu.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 17:20:12 GMT
content-type: text/html
cf-ray: 87a83df9fa7c568f-OSL
cf-cache-status: DYNAMIC
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZbUMpuYd5eFfDjX8zYhAShBVJzDUtxaOkv3aJ-qTU_q_qG62xk1IoA==
x-amz-cf-pop: OSL50-C1
x-amz-rid: 1G6HG71SS7RYQR7RVJ95
x-cache: Miss from cloudfront
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8XXZfbAKIOsXUwz03liz2fW3NxQyYfOrkN2DHk739yxx%2FOj3%2Fhk6WBXi1mNUZBpvDIz7rZKqyH8HLrNRrvTpyxc1IenWD8ZOzbL%2BhOGUyrGokUzawR3pxhFkhBkM%2FFvzMENd3Ccytv8b%2Bm0dA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js

143.204.46.106

200 OK

1.8 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js
IP
143.204.46.106:443
ASN
#16509 AMAZON-02

Requested by
https://fdgchvjhkbjlkytu.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1827), with no line terminators
Size
1.8 kB (1787 bytes)
Hash
747e84e823a449d0603999c8011553ca
aae02cb846cac66e6df9ca9a356a7c6d7c51a65d
2bc70b2c3cfcf9e741e0bc2334bdf31803bd430a3a6425bab043047995eb2b76

HTTP Headers

GET /images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdgchvjhkbjlkytu.pages.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: 571d3d19-ffaf-4b6e-a44f-9d58c827f794
last-modified: Mon, 12 Oct 2015 09:22:39 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-673,/images/G/01/csminstrumentation/csm-captcha-instrumentation.min
surrogate-key: x-cache-673 /images/G/01/csminstrumentation/csm-captcha-instrumentation.min
x-nginx-cache-status: HIT
content-encoding: br
date: Fri, 26 Apr 2024 09:16:45 GMT
cache-control: max-age=86400,public
expires: Sat, 27 Apr 2024 06:45:27 GMT
vary: Accept-Encoding
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 29030
server-timing: provider;desc="cf",cdn-rid;desc="sbNApphkc5JnpNre7oZ7KD4X5DyCakEDvFNCPnRRCzHaw0TuF0Jypg==",cdn-downstream-fbl;dur=2
x-amz-cf-id: sbNApphkc5JnpNre7oZ7KD4X5DyCakEDvFNCPnRRCzHaw0TuF0Jypg==

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (11)

URL GET HTTP/2

IP