Report - sellercentral.amazon.com/nms/redirect/088a2232-0574-3130-9a4f-f602105d3bb7?nt=BBC_MESSAGE_SENT_TO_BUYER&sk=2p_pKjd75F6GuVguBbIUifpzzKtRZzuqxBDz8vL3mClJqQj0RlwBQf1zyvGCN1SKFk-dzNE0vQKh5z492tq50w&n=1&u=aHR0cHM6Ly93d3cuYW1hem9uLmNvbS9tZXNzYWdpbmcvNTU2NzAwMDI3NDkwNTg3ODAyMz9tYXJrZXRwbGFjZUlkPUFUVlBES0lLWDBERVImbWVzc2FnZUlkPTE2ODQwNjc3NzIxMTYzNTk5MDcmcmVmXz1ic21fZW1haWxfcHJvYWN0aXZlJmlkPWFtem4xLmFjY291bnQuT0o3MlFGSkFOVjRBNUZFTVZVMlRPMkxKR1YzR0czUlRPNVJXQzJCVE01UVdZTlRYTzVZM1ZESDJZQjRQNVVIVkJJRFNXNUhXVTNPUk5SRDJJQktWUVlOQ1dDVTZIQU5US0g3TjZPSQ

Report Overview

Submitted URL
sellercentral.amazon.com/nms/redirect/088a2232-0574-3130-9a4f-f602105d3bb7?nt=BBC_MESSAGE_SENT_TO_BUYER&sk=2p_pKjd75F6GuVguBbIUifpzzKtRZzuqxBDz8vL3mClJqQj0RlwBQf1zyvGCN1SKFk-dzNE0vQKh5z492tq50w&n=1&u=aHR0cHM6Ly93d3cuYW1hem9uLmNvbS9tZXNzYWdpbmcvNTU2NzAwMDI3NDkwNTg3ODAyMz9tYXJrZXRwbGFjZUlkPUFUVlBES0lLWDBERVImbWVzc2FnZUlkPTE2ODQwNjc3NzIxMTYzNTk5MDcmcmVmXz1ic21fZW1haWxfcHJvYWN0aXZlJmlkPWFtem4xLmFjY291bnQuT0o3MlFGSkFOVjRBNUZFTVZVMlRPMkxKR1YzR0czUlRPNVJXQzJCVE01UVdZTlRYTzVZM1ZESDJZQjRQNVVIVkJJRFNXNUhXVTNPUk5SRDJJQktWUVlOQ1dDVTZIQU5US0g3TjZPSQ
IP
95.101.10.209
ASN
#20940 Akamai International B.V.
Submitted
2024-04-25 13:42:21
Access
public
Website Title
Amazon Sign-In
Final URL
www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Tags
amazon phishing
urlquery detections
Phishing - Amazon

Detections

urlquery
9
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
images-na.ssl-images-amazon.com	842	2004-07-21	2012-10-30	2024-04-23	7.1 kB	2.8 MB	54.230.83.223
fls-na.amazon.com	1217	1994-11-01	2012-05-25	2024-04-24	8.1 kB	2.0 kB	54.205.161.75
www.amazon.com	514	1994-11-01	2012-05-21	2024-04-24	12 kB	191 kB	143.204.50.178
unagi-na.amazon.com	1084	1994-11-01	2016-04-20	2024-04-18	3.2 kB	3.0 kB	52.46.137.108
unagi.amazon.com	1350	1994-11-01	2020-03-21	2024-04-23	1.2 kB	1.2 kB	209.54.180.48
static.siege-amazon.com	10656	2018-07-02	2019-06-18	2024-04-25	444 B	509 B	0.0.0.0
m.media-amazon.com	580	2016-08-18	2018-06-22	2024-04-24	978 B	29 kB	151.101.193.16
sellercentral.amazon.com	6589	1994-11-01	2012-05-29	2024-02-01	996 B	1.0 kB	143.204.55.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (32)

	URL	Size	First Seen	Last Seen
	images-na.ssl-images-amazon.com/images/I/8135BpGZX3L.js?AUIClients/SiegeClientSideEncryptionAUI	331 kB	2023-04-07	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/8135BpGZX3L.js?AUIClients/SiegeClientSideEncryptionAUI IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-07 10:45:11 Last Seen2024-05-01 21:31:36 Times Seen314 Hash b61c7abd674c3e202ef808da3bc61603 72f730802307c200f36fa442abe679c488e6077b 9494b5f25ab38baf3668843af019a487f87e05c9cb51694967be69ccb86d20c8 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	29 B	2023-03-07	2024-05-04
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:25 Last Seen2024-05-04 19:59:09 Times Seen2931 Hash a0db64d8520965f89004ad07885da245 17117a206b1cb810d433bce68cb7f60d90083189 6ca3a0b470aed20d90d0a9bf5b933c380bf826a8e6eb1620255a74c8e269cbd2 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	9.7 kB	2024-04-25	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:42:23 Last Seen2024-04-25 15:42:23 Times Seen1 Hash c9b553b76fd61928e70d736c5beef3fa 9ca892bb2ed9dd5d7fb901dbd284ab5f692b94f0 3cf273b653692c024d4e87644066ea27838e649e7738dad9d5806dc3c8b9aa1e Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	57 B	2023-03-12	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 14:30:48 Last Seen2024-04-25 15:42:23 Times Seen19 Hash d15699811f576e65107639ef3556273d 8478d3e51dc39f715fbe2deb493bba21989ea2bb c174ef38820706cf4b3e5437f5421d8b54fa1b7e5a34c00e6252b25a929d7a7e Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	40 B	2023-03-07	2024-05-04
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:25 Last Seen2024-05-04 19:59:09 Times Seen2771 Hash 7a726a4e55cc8e8bcb0fa4f01e017bcc 3794e95e8cfe7b6f0c39e222be8fdaf7a8b59300 f785c2d84988d200fbb0a758a911f7253b1e96eb5853e0cde24135e6f4adb705 Loading...

	static.siege-amazon.com/prod/profiles/AuthenticationPortalSigninNA.js	2.1 kB	2023-05-14	2024-05-01
Pretty URL static.siege-amazon.com/prod/profiles/AuthenticationPortalSigninNA.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-14 21:20:58 Last Seen2024-05-01 21:31:36 Times Seen103 Hash 2c11ab97d4fbc3c41ad1b5c3930c40d9 1f94ae41237f5002d522faf029ff4ed4a7ac7985 c5dc3c672e583dafe8a77b73d0475446ece9402dca7c98d9b64879470d597c88 Loading...

	images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js	9.8 kB	2023-03-26	2024-05-04
Pretty URL images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 09:52:34 Last Seen2024-05-04 19:59:10 Times Seen3603 Hash 6eed3151a81957f00c3aa5ad97f78cab 6c0e9ad0acb70ecb40b78b05cc7273d5ff882c97 8a1ca9608771693d06b0109e1e442d495da603f32182a6527f9f1026c84780e9 Loading...

	images-na.ssl-images-amazon.com/images/I/8177uTcYaeL.js?AUIClients/FWCIMAssets	263 kB	2024-03-08	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/8177uTcYaeL.js?AUIClients/FWCIMAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-08 17:12:37 Last Seen2024-05-01 21:31:36 Times Seen70 Hash 013178dff361a6281abdd8da2e6633d5 6a0fcaab213fa49f9b0bde2640e969d2b21ac3fa 208fc08aa371ccc5762f46e2888f39133a056f1cb1f9054a11009b843622eeef Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	200 B	2023-08-31	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-31 11:54:43 Last Seen2024-05-01 21:31:36 Times Seen164 Hash 15f4b07664b495c1930da295157fd0d5 8b7b2cfef659191c4299e14ed2e5b250cc62fc2a eca7ee0aab8416ffb990c5c01247a53db738cd33195df8390ccae4d8085b96c8 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	15 kB	2024-04-25	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 14:49:46 Last Seen2024-05-01 21:31:36 Times Seen5 Hash f2405647bdda36c28d5168eb3f00dff5 28430431ae152fc5bfbc0a21204e429b29976b3a 3a8e8e0f0fb1373afec381fae1f2246e9a82b76991f0a43451a9de39d6b23fd9 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	3.1 kB	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:24 Last Seen2024-05-01 21:31:36 Times Seen253 Hash efe1e58df21018cb57ff8d489c67dc6b 7a9c103990b8d0c6b04d686b72d5821fb435f7ee 39ba1fe020ef9662d8c2daec7a3801b2aaeca471c0020afae1efdf2d551d2377 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	57 B	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10:22 Last Seen2024-05-01 21:31:36 Times Seen259 Hash aacb0caf0aebb15f9920e4ca7d7113fc 798ef8c4b44d013c777756aef835fd26d571733c a88a4e94b6277b875f45e52ff40cd5af7b0782fa68f6babfa9a517dddbd59b82 Loading...

	images-na.ssl-images-amazon.com/images/I/21ZMwVh4T0L._RC\|21OJDARBhQL.js,218GJg15I8L.js,31lucpmF4CL.js,2119M3Ks9rL.js,61Csitc2zoL.js_.js?AUIClients/AuthenticationPortalAssets&L3XM6gEo#818867-T2	110 kB	2024-04-25	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/21ZMwVh4T0L._RC\|21OJDARBhQL.js,218GJg15I8L.js,31lucpmF4CL.js,2119M3Ks9rL.js,61Csitc2zoL.js_.js?AUIClients/AuthenticationPortalAssets&L3XM6gEo#818867-T2 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 14:49:46 Last Seen2024-05-01 21:31:37 Times Seen11 Hash 5e8b100ded14294842078ee095539fd7 f4bb517490c36e6e327d5ca0925593bdb195fc8a 0e0c84bc1527096163476bfcb308dd3182b513d99b67c5ff81933c8ca0e80ecc Loading...

	images-na.ssl-images-amazon.com/images/I/61yXDIPmT-L._RC\|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI	318 kB	2023-03-12	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/61yXDIPmT-L._RC\|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 22:56:38 Last Seen2024-05-01 21:31:36 Times Seen299 Hash 98b2bb8a462f2ce4989b1152fc7d5258 8a2a0120e9fa667407a58b861535e2d29d24badc 9741b8fcee135784a67c89f65aa8cd2d706e77ae27dcc9e0614cd183917494cc Loading...

	unknown	33 B	2023-04-10	2024-05-04
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 20:06:41 Last Seen2024-05-04 19:59:09 Times Seen2205 Hash 6f85a13fd7d30cfe0d38439d0edce526 c9ec25568f400487bcd55e1a4b02c8ab6bfcdf49 fbd566f23d8ab93f4ccede8a8ea17ca82396b60b4b3a9b940cfba4b84f7d2e30 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	15 kB	2024-04-25	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:42:24 Last Seen2024-04-25 15:42:24 Times Seen1 Hash 960d260e9323fa1a9f365a00d693d515 352d82683eb19512c2a39fba5a794afed64144ff 8c47be74099e6ceb89b20193596d917983758f150c46cd9f1a2bc0df06244f90 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	2.4 kB	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:02 Last Seen2024-05-01 21:31:36 Times Seen641 Hash a6a20bf890dd4f7b839e9d5c4123779b 32e743a4a2b3c6c6e9105c09029f1ccc0552f6e0 2b942943a366d20d9932ca71966e877c8da9749f6d27e57dd25d0f903c5481c1 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	58 B	2023-10-04	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-04 16:01:29 Last Seen2024-05-01 21:31:36 Times Seen56 Hash 6826cb55270c78bd012c99fdb9ec0835 9ef144c27cf404ed72778e4b01e4a5f483766273 06911d309aba98a4ac37dd8368cfb6f41e41b5d3f8a34ae7bee60c7ba78f94e9 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	225 B	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:25 Last Seen2024-05-01 21:31:36 Times Seen472 Hash 15bb946fd719d5b13cdf48248651d07e 8baa1965b7057922b276b41f1b7fdf6f2200f30b f6c89d642ec02ce2cf23163b9672194563e0d8c2b1aa1565b24c1bb53c6dc65b Loading...

	images-na.ssl-images-amazon.com/images/I/41lQo3tivsL.js?AUIClients/CVFAssets	21 kB	2024-04-09	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/41lQo3tivsL.js?AUIClients/CVFAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-09 07:06:29 Last Seen2024-05-01 21:31:36 Times Seen22 Hash 59e01f76455be0c9a40f86af5b72d312 033399e5aa5b5f1c77bcb8716b8fa3f570eaab66 51c336eb2663a85a52a7bbeb3c6a3da181ae9ea4ed2893f196236c162fd3fd12 Loading...

	images-na.ssl-images-amazon.com/images/I/31jdfgcsPAL.js?AUIClients/AmazonUIFormControlsJS	14 kB	2023-03-07	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/31jdfgcsPAL.js?AUIClients/AmazonUIFormControlsJS IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:22 Last Seen2024-05-01 21:31:37 Times Seen533 Hash 2f9eadd4ca0c94a2924719dc293335ed 7e87fa031017ab7caee9f4ba5a2458b93867c42d 2e5c4e5dd76d19bd957864a5485880b7dd5381be31835dc30dbb276d82652a89 Loading...

	images-na.ssl-images-amazon.com/images/I/51RddlGAZmL.js?AUIClients/IdentityJsCommonAssets	60 kB	2024-04-23	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/51RddlGAZmL.js?AUIClients/IdentityJsCommonAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 14:35:08 Last Seen2024-05-01 21:31:37 Times Seen20 Hash 074912bf9e95b80e388e3af66eabb7f2 792276b4ed775d7c8432d024dab1eb8e39715614 69d3a11143ca914c77d7e87b819182e813979003ab1df0eb865b09690d67a945 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	4 B	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:25 Last Seen2024-05-01 21:31:36 Times Seen480 Hash c39fcfa9b9256ec9304c75d5091eb05a 6663c2aaab733ba00445b37ec659b84d87906cc8 7869b933ae7f7e9b35f15187ba5d49f0374f04e8727917d8be1e0ac930231771 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	841 B	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:24 Last Seen2024-05-01 21:31:36 Times Seen385 Hash 9857322777193fe2828ccb5e6e3b2c45 5e2ad70ca8f5c035fb918342789d98151ca3ebd7 6f51f151936935a497025c51de6d71806db9f46bde83089e82a537160d44c2b6 Loading...

	images-na.ssl-images-amazon.com/images/I/71iwEtF6iWL.js?AUIClients/IdentityWebAuthnAssets	180 kB	2024-04-23	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/71iwEtF6iWL.js?AUIClients/IdentityWebAuthnAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 14:35:08 Last Seen2024-05-01 21:31:36 Times Seen20 Hash e683244e1b98fe1931f7097758ec1e71 6177d617a8843c02602e07ea6963516977e3d70f 198d562ed61c6f257fd4f2defb512ae7ae9d17eec5cac639cd596ad89b2bbefe Loading...

	images-na.ssl-images-amazon.com/images/I/A1bfdSKFkcL.js?AUIClients/ACICAssets	1.5 MB	2024-03-19	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/A1bfdSKFkcL.js?AUIClients/ACICAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-19 20:03:40 Last Seen2024-05-01 21:31:36 Times Seen30 Hash e1ea9cce8feb2b439eddb4df0bc8833d f2e09cb7ed5dee49f7aa226ff48db35726118f44 dff8e335ff1217cd1f7b830f7d9cb20eeead7c27ab356b57e08380afb73f83a7 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	97 B	2023-03-07	2024-05-01
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:29:24 Last Seen2024-05-01 21:31:36 Times Seen385 Hash 34b015ed697a80f75ddfd75600c35151 ca0149d120cf1d3b8113c707e26b6f692ef93ea6 7fbb479af772babab37fe106b09ddde7329f6af2d440ac09032aa6d1cd9fb1ce Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	5.0 kB	2024-04-25	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:42:24 Last Seen2024-04-25 15:42:24 Times Seen1 Hash 58f6ab87c9886085accb44feff4f1cef b324f578a1c3f2345ddc72246262d631f29da817 ae2e8ff3c630bfa3b4b4ce58e15465ba4b09987d802789e64d0c3cf525f305ef Loading...

	images-na.ssl-images-amazon.com/images/I/01wGDSlxwdL.js?AUIClients/AuthenticationPortalInlineAssets	521 B	2023-03-07	2024-05-01
Pretty URL images-na.ssl-images-amazon.com/images/I/01wGDSlxwdL.js?AUIClients/AuthenticationPortalInlineAssets IP 54.230.83.223 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:22 Last Seen2024-05-01 21:31:36 Times Seen451 Hash c043eec9fc9735799701a0aeb64c1569 a4a4fca8c35cd12206bf915cba1aa0075e436ab6 432dff2bd6f663c6151a5947fa318a46463085d4f6e40761450e8b38fd0fe938 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	75 kB	2024-04-25	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:42:24 Last Seen2024-04-25 15:42:24 Times Seen1 Hash 7f151ef0eced163de7af5e4eba3bbd9e d3a9641c41d7aface02f8759f2226a3b36f22094 8ddc100e5d9811a85c63226f887da71ec7712cb37d61d2a0718b92794af880b0 Loading...

	www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0	58 B	2024-04-25	2024-04-25
Pretty URL www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 IP 143.204.50.178 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:42:24 Last Seen2024-04-25 15:42:24 Times Seen1 Hash 465f6d1402aa90bc0166d13056ee59e3 573eb06c9d1e16371623679756d20c2205c0e056 ba67e727c93a43dd960bd145a1abed91fd3d03774c558cb90b765a6ec0c0d36e Loading...

		Size	First Seen	Last Seen
	#1 Write - 052773dd956bd3c2bfcbfb25ddb71c90	69 B	2023-03-07	2024-05-01
Pretty Observations First Seen2023-03-07 01:06:54 Last Seen2024-05-01 21:31:36 Times Seen1104 Hash 052773dd956bd3c2bfcbfb25ddb71c90 f283366c1452a97275443fd49e7a0bc9197ba23d 587cdc48d51a7732ad2019d0d9099c3d1c50ecbc25083cb607db301422373df1 Loading...

HTTP Transactions (42)

URL IP Response Size

sellercentral.amazon.com/nms/redirect/088a2232-0574-3130-9a4f-f602105d3bb7?nt=BBC_MESSAGE_SENT_TO_BUYER&sk=2p_pKjd75F6GuVguBbIUifpzzKtRZzuqxBDz8vL3mClJqQj0RlwBQf1zyvGCN1SKFk-dzNE0vQKh5z492tq50w&n=1&u=aHR0cHM6Ly93d3cuYW1hem9uLmNvbS9tZXNzYWdpbmcvNTU2NzAwMDI3NDkwNTg3ODAyMz9tYXJrZXRwbGFjZUlkPUFUVlBES0lLWDBERVImbWVzc2FnZUlkPTE2ODQwNjc3NzIxMTYzNTk5MDcmcmVmXz1ic21fZW1haWxfcHJvYWN0aXZlJmlkPWFtem4xLmFjY291bnQuT0o3MlFGSkFOVjRBNUZFTVZVMlRPMkxKR1YzR0czUlRPNVJXQzJCVE01UVdZTlRYTzVZM1ZESDJZQjRQNVVIVkJJRFNXNUhXVTNPUk5SRDJJQktWUVlOQ1dDVTZIQU5US0g3TjZPSQ

143.204.55.117

302 Found

0 B

URL User Request GET HTTP/2
sellercentral.amazon.com/nms/redirect/088a2232-0574-3130-9a4f-f602105d3bb7?nt=BBC_MESSAGE_SENT_TO_BUYER&sk=2p_pKjd75F6GuVguBbIUifpzzKtRZzuqxBDz8vL3mClJqQj0RlwBQf1zyvGCN1SKFk-dzNE0vQKh5z492tq50w&n=1&u=aHR0cHM6Ly93d3cuYW1hem9uLmNvbS9tZXNzYWdpbmcvNTU2NzAwMDI3NDkwNTg3ODAyMz9tYXJrZXRwbGFjZUlkPUFUVlBES0lLWDBERVImbWVzc2FnZUlkPTE2ODQwNjc3NzIxMTYzNTk5MDcmcmVmXz1ic21fZW1haWxfcHJvYWN0aXZlJmlkPWFtem4xLmFjY291bnQuT0o3MlFGSkFOVjRBNUZFTVZVMlRPMkxKR1YzR0czUlRPNVJXQzJCVE01UVdZTlRYTzVZM1ZESDJZQjRQNVVIVkJJRFNXNUhXVTNPUk5SRDJJQktWUVlOQ1dDVTZIQU5US0g3TjZPSQ
IP
143.204.55.117:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectsellercentral.amazon.com
Fingerprint8E:30:37:FD:DB:AE:37:42:08:B0:62:7D:3B:31:E2:2B:F9:EB:16:5F
ValidityThu, 11 Jan 2024 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /nms/redirect/088a2232-0574-3130-9a4f-f602105d3bb7?nt=BBC_MESSAGE_SENT_TO_BUYER&sk=2p_pKjd75F6GuVguBbIUifpzzKtRZzuqxBDz8vL3mClJqQj0RlwBQf1zyvGCN1SKFk-dzNE0vQKh5z492tq50w&n=1&u=aHR0cHM6Ly93d3cuYW1hem9uLmNvbS9tZXNzYWdpbmcvNTU2NzAwMDI3NDkwNTg3ODAyMz9tYXJrZXRwbGFjZUlkPUFUVlBES0lLWDBERVImbWVzc2FnZUlkPTE2ODQwNjc3NzIxMTYzNTk5MDcmcmVmXz1ic21fZW1haWxfcHJvYWN0aXZlJmlkPWFtem4xLmFjY291bnQuT0o3MlFGSkFOVjRBNUZFTVZVMlRPMkxKR1YzR0czUlRPNVJXQzJCVE01UVdZTlRYTzVZM1ZESDJZQjRQNVVIVkJJRFNXNUhXVTNPUk5SRDJJQktWUVlOQ1dDVTZIQU5US0g3TjZPSQ HTTP/1.1
Host: sellercentral.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: application/json; charset=utf-8
content-length: 0
location: https://www.amazon.com/messaging/5567000274905878023?marketplaceId=ATVPDKIKX0DER&messageId=1684067772116359907&ref_=bsm_email_proactive&id=amzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI
date: Thu, 25 Apr 2024 13:41:54 GMT
server: Server
x-amz-rid: 5B6RX5N2GJ8R23V1P51D
x-amzn-requestid: 7c706cad-2349-4db5-a619-bec5213126ef
x-amz-date: Thu, 25 Apr 2024 13:41:54 GMT
cache-directive: no-cache
cache-control: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
vary: Content-Type,Accept-Encoding,User-Agent
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-cache: Miss from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QhDXXeMngIF_KXdlDLSk-mVxyPetWmVFRuCB8Cx1JswrimyDEvpeZQ==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/21EtarfodyL.css?AUIClients/CVFAssets

54.230.83.223

200 OK

1.3 kB

URL GET HTTP/2
images-na.ssl-images-amazon.com/images/I/21EtarfodyL.css?AUIClients/CVFAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (4610), with no line terminators
Size
1.3 kB (1307 bytes)
Hash
ac1094240a155636d7cd9514487b6dd3
6ce5cbcbd29a7adcd836dfa34ba2f9accc93c4dc
219a7829a7d8e6a1de6e5d23c52521b6b9e423d29a95c61fe31fcff9b5f84c45

HTTP Headers

GET /images/I/21EtarfodyL.css?AUIClients/CVFAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: Server
x-amz-ir-id: 593c98cf-48bc-4d39-aca1-68209bba7492
date: Tue, 02 Apr 2024 17:03:36 GMT
cache-control: max-age=630720000,public
last-modified: Tue, 26 Mar 2024 00:13:39 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-956,/images/I/21EtarfodyL
expires: Mon, 28 Mar 2044 17:03:36 GMT
surrogate-key: x-cache-956 /images/I/21EtarfodyL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 1975099
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v3Y04BfKOCNor2kGPZ4346orSxf-z36rU0cBP7eY3dgUP9y9YU27sQ==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/71iwEtF6iWL.js?AUIClients/IdentityWebAuthnAssets

54.230.83.223

200 OK

59 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/71iwEtF6iWL.js?AUIClients/IdentityWebAuthnAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (608)
Size
59 kB (59190 bytes)
Hash
e683244e1b98fe1931f7097758ec1e71
6177d617a8843c02602e07ea6963516977e3d70f
198d562ed61c6f257fd4f2defb512ae7ae9d17eec5cac639cd596ad89b2bbefe

HTTP Headers

GET /images/I/71iwEtF6iWL.js?AUIClients/IdentityWebAuthnAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: a0f6850a-3b79-4e1d-a21b-f71f499b49bf
date: Sat, 06 Apr 2024 01:35:12 GMT
cache-control: max-age=630720000,public
last-modified: Fri, 05 Apr 2024 21:37:26 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-600,/images/I/71iwEtF6iWL
expires: Fri, 01 Apr 2044 01:35:12 GMT
surrogate-key: x-cache-600 /images/I/71iwEtF6iWL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 1685203
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-P1",cdn-hit-layer;desc="EDGE",provider;desc="cf",cdn-rid;desc="MR78xLb7_HkE9-PIBmt1CAiEiGpoEOPtaO0U6Vf7unMLKxnNSHj0HQ==",cdn-downstream-fbl;dur=3
x-amz-cf-id: MR78xLb7_HkE9-PIBmt1CAiEiGpoEOPtaO0U6Vf7unMLKxnNSHj0HQ==

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fstaticb%26id%3DBGX7CAAPC84T458X9PWN:0

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fstaticb%26id%3DBGX7CAAPC84T458X9PWN:0
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fstaticb%26id%3DBGX7CAAPC84T458X9PWN:0 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:41:55 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 03781c04-35a8-4b99-ae66-fdcd84ce892c
X-Firefox-Spdy: h2

www.amazon.com/favicon.ico

143.204.50.178

200 OK

18 kB

URL GET HTTP/3
www.amazon.com/favicon.ico
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
18 kB (17542 bytes)
Hash
ca6619b86c2f6e6068b69ba3aaddb7e4
c44a1bb9d14385334eb851fbb0afb19d961c1ee7
17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515255
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon
content-length: 17542
age: 109
server: Server
date: Thu, 25 Apr 2024 13:40:06 GMT
x-amz-rid: ST3N5N6QPX9RHBDQQD9F
accept-ranges: bytes
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-frame-options: SAMEORIGIN
etag: "4486-490c87c5a6340"
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Ou4lOpcj7_W-G2NRRv2Gpm8d_ZvC5x3BRvYqsCktoJZvPVk0ln0GrQ==

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26sw%3D1280%26sh%3D1024%26vw%3D1280%26vh%3D1024%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26ue%3D6%26bb%3D157%26cf%3D170%26be%3D179%26fcp%3D384%26pc%3D575%26tc%3D-1101%26na_%3D-1101%26ul_%3D-1714052515099%26_ul%3D-1714052515099%26rd_%3D-1714052515099%26_rd%3D-1714052515099%26fe_%3D-595%26lk_%3D-595%26_lk%3D-595%26co_%3D-595%26_co%3D-595%26sc_%3D-595%26rq_%3D-592%26rs_%3D-446%26_rs%3D-146%26dl_%3D-55%26di_%3D362%26de_%3D455%26_de%3D459%26_dc%3D573%26ld_%3D573%26_ld%3D-1714052515099%26ntd%3D-2%26ty%3D0%26rc%3D0%26hob%3D3%26hoe%3D6%26ld%3D576%26t%3D1714052515675%26ctb%3D1%26rt%3Dcf%3A4-1-3-0-2-0-0__ld%3A17-11-3-1-5-0-0%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.23.1-2024-02-27%7Cfls-na-amazon-com%26viz%3Dvisible%3A6%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:579

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26sw%3D1280%26sh%3D1024%26vw%3D1280%26vh%3D1024%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26ue%3D6%26bb%3D157%26cf%3D170%26be%3D179%26fcp%3D384%26pc%3D575%26tc%3D-1101%26na_%3D-1101%26ul_%3D-1714052515099%26_ul%3D-1714052515099%26rd_%3D-1714052515099%26_rd%3D-1714052515099%26fe_%3D-595%26lk_%3D-595%26_lk%3D-595%26co_%3D-595%26_co%3D-595%26sc_%3D-595%26rq_%3D-592%26rs_%3D-446%26_rs%3D-146%26dl_%3D-55%26di_%3D362%26de_%3D455%26_de%3D459%26_dc%3D573%26ld_%3D573%26_ld%3D-1714052515099%26ntd%3D-2%26ty%3D0%26rc%3D0%26hob%3D3%26hoe%3D6%26ld%3D576%26t%3D1714052515675%26ctb%3D1%26rt%3Dcf%3A4-1-3-0-2-0-0__ld%3A17-11-3-1-5-0-0%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.23.1-2024-02-27%7Cfls-na-amazon-com%26viz%3Dvisible%3A6%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:579
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26sw%3D1280%26sh%3D1024%26vw%3D1280%26vh%3D1024%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26ue%3D6%26bb%3D157%26cf%3D170%26be%3D179%26fcp%3D384%26pc%3D575%26tc%3D-1101%26na_%3D-1101%26ul_%3D-1714052515099%26_ul%3D-1714052515099%26rd_%3D-1714052515099%26_rd%3D-1714052515099%26fe_%3D-595%26lk_%3D-595%26_lk%3D-595%26co_%3D-595%26_co%3D-595%26sc_%3D-595%26rq_%3D-592%26rs_%3D-446%26_rs%3D-146%26dl_%3D-55%26di_%3D362%26de_%3D455%26_de%3D459%26_dc%3D573%26ld_%3D573%26_ld%3D-1714052515099%26ntd%3D-2%26ty%3D0%26rc%3D0%26hob%3D3%26hoe%3D6%26ld%3D576%26t%3D1714052515675%26ctb%3D1%26rt%3Dcf%3A4-1-3-0-2-0-0__ld%3A17-11-3-1-5-0-0%26csmtags%3Daui%7Caui%3Aaui_build_date%3A3.23.1-2024-02-27%7Cfls-na-amazon-com%26viz%3Dvisible%3A6%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:579 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:41:55 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 0f1ea0f0-ef2c-4821-b61d-de3b06e68406
X-Firefox-Spdy: h2

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26sc0%3Due_sushi_v1%26bb0%3D184%26pc0%3D186%26ld0%3D186%26t0%3D1714052515285%26ctb%3D1:579
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26sc0%3Due_sushi_v1%26bb0%3D184%26pc0%3D186%26ld0%3D186%26t0%3D1714052515285%26ctb%3D1:579 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:41:55 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 02e8bc43-1513-4225-9f44-c263dac33f6c
X-Firefox-Spdy: h2

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26m%3D1%26sc%3Dadblk_no%26pc%3D726%26at%3D726%26t%3D1714052515825%26csmtags%3Dadblk_no%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:728

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26m%3D1%26sc%3Dadblk_no%26pc%3D726%26at%3D726%26t%3D1714052515825%26csmtags%3Dadblk_no%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:728
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26m%3D1%26sc%3Dadblk_no%26pc%3D726%26at%3D726%26t%3D1714052515825%26csmtags%3Dadblk_no%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:728 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:41:55 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 5b3730dc-553a-475e-8b9e-fbd36be78418
X-Firefox-Spdy: h2

www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&m=1&sc=adblk_no&pc=726&at=726&t=1714052515825&csmtags=adblk_no&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1

143.204.50.178

204 No Content

0 B

URL GET HTTP/3
www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&m=1&sc=adblk_no&pc=726&at=726&t=1714052515825&csmtags=adblk_no&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&m=1&sc=adblk_no&pc=726&at=726&t=1714052515825&csmtags=adblk_no&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1 HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515827&adb:adblk_no; id_pkel=n0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: image/gif;charset=UTF-8
alt-svc: h3=":443"; ma=86400
server: Server
date: Thu, 25 Apr 2024 13:41:55 GMT
x-amz-rid: R16WX6ZQQSP90B27APSF
x-xss-protection: 1
x-content-type-options: nosniff
x-ua-compatible: IE=edge
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SVmxF9J3eYK3zhE1GWbbeXMo3B_kCtl7kEMHocN1evhrU7zaosJ8BA==

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D591%26pc0%3D782%26ld0%3D782%26t0%3D1714052515881%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:782

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D591%26pc0%3D782%26ld0%3D782%26t0%3D1714052515881%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:782
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fld%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D591%26pc0%3D782%26ld0%3D782%26t0%3D1714052515881%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:782 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:41:55 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 72d0635b-473d-4813-ab16-03e548e2ffe0
X-Firefox-Spdy: h2

www.amazon.com/messaging/5567000274905878023?marketplaceId=ATVPDKIKX0DER&messageId=1684067772116359907&ref_=bsm_email_proactive&id=amzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI

143.204.50.178

302 Found

23 kB

URL User Request GET HTTP/2
www.amazon.com/messaging/5567000274905878023?marketplaceId=ATVPDKIKX0DER&messageId=1684067772116359907&ref_=bsm_email_proactive&id=amzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
gzip compressed data
Size
23 kB (22909 bytes)
Hash
1c4aeac7938f1032f9d73991dbfcd6e4
cadbb65ee2ea093e5fcfd306d7e29b51fdd7248d
1827467a79005cd8b05f6b5976928acc10e97a02b8a95a997774d95401101ba3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /messaging/5567000274905878023?marketplaceId=ATVPDKIKX0DER&messageId=1684067772116359907&ref_=bsm_email_proactive&id=amzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
server: Server
date: Thu, 25 Apr 2024 13:41:54 GMT
x-amz-rid: GE4T40B2CYY0E71F0KP1
set-cookie: session-id=131-3430566-4101056; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
session-id-time=2082787201l; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
i18n-prefs=USD; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/
sp-cdn="L5Z9:NO"; Version=1; Domain=.amazon.com; Max-Age=31536000; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure; HttpOnly
content-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/
content-security-policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/
x-xss-protection: 1;
accept-ch: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr
x-content-type-options: nosniff
content-encoding: gzip
accept-ch-lifetime: 86400
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _VngOtKIGSCybmWLlgL0eN7SGOrcfUV-FowJjeGHGZy5KJLHQVrrlA==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js

54.230.83.223

200 OK

8.9 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/31bJewCvY-L.js
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
8.9 kB (8919 bytes)
Hash
9123c1352c0d40aac10c624ee0014cfe
74614d336c23604038d2488bd29b983d0e375607
db7fd3b64d490cf9c4d44a39b08abe0c3a0f2ddca90dba027483483fd5976dc3

HTTP Headers

GET /images/I/31bJewCvY-L.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
date: Tue, 11 Jul 2023 13:27:27 GMT
x-amz-ir-id: 47f76951-168d-4297-b5c9-febf6cb1e706
cache-control: max-age=630720000,public
last-modified: Tue, 14 Mar 2023 13:05:34 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-794,/images/I/31bJewCvY-L
expires: Fri, 26 Jun 2043 18:35:50 GMT
surrogate-key: x-cache-794 /images/I/31bJewCvY-L
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24970468
server-timing: provider;desc="cf",cdn-rid;desc="DTQIWUo1gg7a_vgajfpJcfqKARxMIE2MPHeNiZaGXXiHDiZLZJpbeQ==",cdn-downstream-fbl;dur=1
x-amz-cf-id: DTQIWUo1gg7a_vgajfpJcfqKARxMIE2MPHeNiZaGXXiHDiZLZJpbeQ==

www.amazon.com/ap/uedata?ld&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&sw=1280&sh=1024&vw=1280&vh=1024&m=1&sc=BGX7CAAPC84T458X9PWN&ue=6&bb=157&cf=170&be=179&fcp=384&pc=575&tc=-1101&na_=-1101&ul_=-1714052515099&_ul=-1714052515099&rd_=-1714052515099&_rd=-1714052515099&fe_=-595&lk_=-595&_lk=-595&co_=-595&_co=-595&sc_=-595&rq_=-592&rs_=-446&_rs=-146&dl_=-55&di_=362&de_=455&_de=459&_dc=573&ld_=573&_ld=-1714052515099&ntd=-2&ty=0&rc=0&hob=3&hoe=6&ld=576&t=1714052515675&ctb=1&rt=cf:4-1-3-0-2-0-0__ld:17-11-3-1-5-0-0&csmtags=aui|aui:aui_build_date:3.23.1-2024-02-27|fls-na-amazon-com&viz=visible:6&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1

143.204.50.178

204 No Content

0 B

URL GET HTTP/3
www.amazon.com/ap/uedata?ld&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&sw=1280&sh=1024&vw=1280&vh=1024&m=1&sc=BGX7CAAPC84T458X9PWN&ue=6&bb=157&cf=170&be=179&fcp=384&pc=575&tc=-1101&na_=-1101&ul_=-1714052515099&_ul=-1714052515099&rd_=-1714052515099&_rd=-1714052515099&fe_=-595&lk_=-595&_lk=-595&co_=-595&_co=-595&sc_=-595&rq_=-592&rs_=-446&_rs=-146&dl_=-55&di_=362&de_=455&_de=459&_dc=573&ld_=573&_ld=-1714052515099&ntd=-2&ty=0&rc=0&hob=3&hoe=6&ld=576&t=1714052515675&ctb=1&rt=cf:4-1-3-0-2-0-0__ld:17-11-3-1-5-0-0&csmtags=aui|aui:aui_build_date:3.23.1-2024-02-27|fls-na-amazon-com&viz=visible:6&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /ap/uedata?ld&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&sw=1280&sh=1024&vw=1280&vh=1024&m=1&sc=BGX7CAAPC84T458X9PWN&ue=6&bb=157&cf=170&be=179&fcp=384&pc=575&tc=-1101&na_=-1101&ul_=-1714052515099&_ul=-1714052515099&rd_=-1714052515099&_rd=-1714052515099&fe_=-595&lk_=-595&_lk=-595&co_=-595&_co=-595&sc_=-595&rq_=-592&rs_=-446&_rs=-146&dl_=-55&di_=362&de_=455&_de=459&_dc=573&ld_=573&_ld=-1714052515099&ntd=-2&ty=0&rc=0&hob=3&hoe=6&ld=576&t=1714052515675&ctb=1&rt=cf:4-1-3-0-2-0-0__ld:17-11-3-1-5-0-0&csmtags=aui|aui:aui_build_date:3.23.1-2024-02-27|fls-na-amazon-com&viz=visible:6&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1 HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515255
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: image/gif;charset=UTF-8
alt-svc: h3=":443"; ma=86400
server: Server
date: Thu, 25 Apr 2024 13:41:56 GMT
x-amz-rid: X2H47ATK49B9JAMDT0Y3
x-xss-protection: 1
x-content-type-options: nosniff
x-ua-compatible: IE=edge
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uEfZCYAIPC7PpO1uuuW6GPafZt4JtXnRiIxscVmwDDe69oYSEDzg2g==

unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus

52.46.137.108

200 OK

22 B

URL POST HTTP/1.1
unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus
IP
52.46.137.108:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.eel.katal.metrics.core.nexus HTTP/1.1
Host: unagi-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 820
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:41:56 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: XH6V2FT76E7F03C6RWCR
x-amzn-RequestId: 8d895bed-b216-4695-9a1b-8b10bb97385f
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.prod

52.46.137.108

200 OK

22 B

URL POST HTTP/1.1
unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.prod
IP
52.46.137.108:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.csm.nexusclient.prod HTTP/1.1
Host: unagi-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7276
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:41:56 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: 7V396SY951KWYNDR12NW
x-amzn-RequestId: 250e06c4-1613-4dca-8903-1127e3766554
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

fls-na.amazon.com/1/batch/1/OE/

54.205.161.75

204 No Content

0 B

URL POST HTTP/2
fls-na.amazon.com/1/batch/1/OE/
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /1/batch/1/OE/ HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2251
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

HTTP/2 204 No Content
date: Thu, 25 Apr 2024 13:41:56 GMT
x-amzn-requestid: b31ae889-9622-4faa-a4c2-db3deec94a78
access-control-allow-origin: *
access-control-expose-headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
X-Firefox-Spdy: h2

unagi.amazon.com/1/events/com.amazon.csm.csa.prod

209.54.180.48

200 OK

22 B

URL POST HTTP/1.1
unagi.amazon.com/1/events/com.amazon.csm.csa.prod
IP
209.54.180.48:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.csm.csa.prod HTTP/1.1
Host: unagi.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 14450
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:42:01 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: SJG3XR718GV3QJB216PC
x-amzn-RequestId: 38563418-75ea-48ca-8a76-cd68fff1ef34
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus

52.46.137.108

200 OK

22 B

URL POST HTTP/1.1
unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus
IP
52.46.137.108:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.eel.katal.metrics.core.nexus HTTP/1.1
Host: unagi-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 847
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:42:05 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: 1NC40XEJ9JS2CQFXQ5W1
x-amzn-RequestId: b408752d-9e76-420b-ae5b-dd91b0516cc7
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.prod

52.46.137.108

200 OK

22 B

URL POST HTTP/1.1
unagi-na.amazon.com/1/events/com.amazon.csm.nexusclient.prod
IP
52.46.137.108:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.csm.nexusclient.prod HTTP/1.1
Host: unagi-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 812
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:42:05 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: 4ERWY6E3VP7NHS0B44WC
x-amzn-RequestId: dd7161aa-021e-4df1-9baf-d3e9bd1d3d88
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

fls-na.amazon.com/1/batch/1/OE/

54.205.161.75

204 No Content

0 B

URL POST HTTP/2
fls-na.amazon.com/1/batch/1/OE/
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /1/batch/1/OE/ HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 318
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

HTTP/2 204 No Content
date: Thu, 25 Apr 2024 13:42:05 GMT
x-amzn-requestid: 0c6a0c3a-4861-4f1c-9a9e-76d426a8f97b
access-control-allow-origin: *
access-control-expose-headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
X-Firefox-Spdy: h2

unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus

52.46.137.108

200 OK

22 B

URL POST HTTP/1.1
unagi-na.amazon.com/1/events/com.amazon.eel.katal.metrics.core.nexus
IP
52.46.137.108:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.eel.katal.metrics.core.nexus HTTP/1.1
Host: unagi-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 624
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:42:06 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: 416MR9DN8Z0VKHF9V200
x-amzn-RequestId: 6a754e40-9bb1-4fef-a3d9-17abb982297e
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17711%26at%3D17711%26t%3D1714052532810%26csmtags%3Daui%3Asw%3Apage_proxy%3Aunsupported_browser%7Ccsm-feature-touch-enabled%3Afalse%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:17713

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17711%26at%3D17711%26t%3D1714052532810%26csmtags%3Daui%3Asw%3Apage_proxy%3Aunsupported_browser%7Ccsm-feature-touch-enabled%3Afalse%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:17713
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17711%26at%3D17711%26t%3D1714052532810%26csmtags%3Daui%3Asw%3Apage_proxy%3Aunsupported_browser%7Ccsm-feature-touch-enabled%3Afalse%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1:17713 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:42:12 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: ac16c78b-04c4-42b1-95af-d87986f0e314
X-Firefox-Spdy: h2

fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17721%26at%3D17721%26t%3D1714052532820%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1%26ui%3D2:17722

54.205.161.75

200 OK

43 B

URL GET HTTP/2
fls-na.amazon.com/1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17721%26at%3D17721%26t%3D1714052532820%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1%26ui%3D2:17722
IP
54.205.161.75:443
ASN
#14618 AMAZON-AES

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectfls-na.amazon.com
Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/batch/1/OP/ATVPDKIKX0DER:131-3430566-4101056:BGX7CAAPC84T458X9PWN$uedata=s:%2Fap%2Fuedata%3Fat%26v%3D0.280341.0%26id%3DBGX7CAAPC84T458X9PWN%26ctb%3D1%26m%3D1%26sc%3DBGX7CAAPC84T458X9PWN%26pc%3D17721%26at%3D17721%26t%3D1714052532820%26pty%3DAuthenticationPortal%26spty%3DSignInApplication%26pti%3Dundefined%26tid%3DBGX7CAAPC84T458X9PWN%26aftb%3D1%26ui%3D2:17722 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 13:42:12 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: c3b23105-6b41-47ce-9fd1-56668a6929f0
X-Firefox-Spdy: h2

www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17711&at=17711&t=1714052532810&csmtags=aui:sw:page_proxy:unsupported_browser|csm-feature-touch-enabled:false&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1

143.204.50.178

204 No Content

0 B

URL GET HTTP/3
www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17711&at=17711&t=1714052532810&csmtags=aui:sw:page_proxy:unsupported_browser|csm-feature-touch-enabled:false&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17711&at=17711&t=1714052532810&csmtags=aui:sw:page_proxy:unsupported_browser|csm-feature-touch-enabled:false&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1 HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515827&adb:adblk_no; id_pkel=n0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: image/gif;charset=UTF-8
alt-svc: h3=":443"; ma=86400
server: Server
date: Thu, 25 Apr 2024 13:42:12 GMT
x-amz-rid: 7CE989DMG9D4HG8Z9563
x-xss-protection: 1
x-content-type-options: nosniff
x-ua-compatible: IE=edge
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J6u-ifEvqGZOIcfB9MPnU6Y7HcJjkMH83yzLnkg3FvVmMeY5uURXUw==

www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17721&at=17721&t=1714052532820&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1&ui=2

143.204.50.178

204 No Content

0 B

URL GET HTTP/3
www.amazon.com/ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17721&at=17721&t=1714052532820&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1&ui=2
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /ap/uedata?at&v=0.280341.0&id=BGX7CAAPC84T458X9PWN&ctb=1&m=1&sc=BGX7CAAPC84T458X9PWN&pc=17721&at=17721&t=1714052532820&pty=AuthenticationPortal&spty=SignInApplication&pti=undefined&tid=BGX7CAAPC84T458X9PWN&aftb=1&ui=2 HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515827&adb:adblk_no; id_pkel=n0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: image/gif;charset=UTF-8
alt-svc: h3=":443"; ma=86400
server: Server
date: Thu, 25 Apr 2024 13:42:12 GMT
x-amz-rid: 4EQKXRT5RMV2F3281ET2
x-xss-protection: 1
x-content-type-options: nosniff
x-ua-compatible: IE=edge
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R6aI6y-Dwl2rWcDM1AxEtRZUgqMoVrqxlzowTOXnzBoJBAodjfWobA==

unagi.amazon.com/1/events/com.amazon.csm.csa.prod

209.54.180.48

200 OK

22 B

URL POST HTTP/1.1
unagi.amazon.com/1/events/com.amazon.csm.csa.prod
IP
209.54.180.48:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectunagi-na.amazon.com
Fingerprint02:6C:84:E7:D1:42:99:2E:8A:B6:1D:26:6E:06:B6:F4:EC:7E:D7:0D
ValidityThu, 18 Jan 2024 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT

File type
JSON text data
Size
22 B (22 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

POST /1/events/com.amazon.csm.csa.prod HTTP/1.1
Host: unagi.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1055
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Server: Server
Date: Thu, 25 Apr 2024 13:42:17 GMT
Content-Type: application/json
Content-Length: 22
Connection: keep-alive
x-amz-rid: YQKAN3XG858S4ZA3NRT8
x-amzn-RequestId: ed3617db-7cf8-4fa5-82f9-2c16bcc38cd2
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

static.siege-amazon.com/prod/profiles/AuthenticationPortalSigninNA.js

0.0.0.0

0 B

URL GET
static.siege-amazon.com/prod/profiles/AuthenticationPortalSigninNA.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerAmazon
Subjectstatic.siege-amazon.com
FingerprintDD:2D:13:81:C6:7F:75:53:52:5E:DF:11:91:32:64:03:56:45:5F:8B
ValidityTue, 30 Jan 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /prod/profiles/AuthenticationPortalSigninNA.js HTTP/1.1
Host: static.siege-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain
last-modified: Thu, 11 May 2023 14:54:57 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 04:34:45 GMT
etag: W/"2c11ab97d4fbc3c41ad1b5c3930c40d9"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7e1PGUj-vv4E-aqHX1UVKSXWXW2h3Zms_9gL860jS9LNX2XjmoZ5EA==
age: 32831
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/51RddlGAZmL.js?AUIClients/IdentityJsCommonAssets

54.230.83.223

200 OK

60 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/51RddlGAZmL.js?AUIClients/IdentityJsCommonAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (657)
Size
60 kB (59617 bytes)
Hash
074912bf9e95b80e388e3af66eabb7f2
792276b4ed775d7c8432d024dab1eb8e39715614
69d3a11143ca914c77d7e87b819182e813979003ab1df0eb865b09690d67a945

HTTP Headers

GET /images/I/51RddlGAZmL.js?AUIClients/IdentityJsCommonAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: d92bf3a4-cdff-4497-bceb-1a9fb634e188
date: Sat, 06 Apr 2024 01:35:22 GMT
cache-control: max-age=630720000,public
last-modified: Fri, 05 Apr 2024 21:31:59 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-562,/images/I/51RddlGAZmL
expires: Fri, 01 Apr 2044 01:35:22 GMT
surrogate-key: x-cache-562 /images/I/51RddlGAZmL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 1685193
server-timing: provider;desc="cf",cdn-rid;desc="qLKfnASiHuI39IL_8IwILw7BwjEl3MiUzC1B0cMbGfVlFfCrVmaOXw==",cdn-downstream-fbl;dur=3
x-amz-cf-id: qLKfnASiHuI39IL_8IwILw7BwjEl3MiUzC1B0cMbGfVlFfCrVmaOXw==

images-na.ssl-images-amazon.com/images/I/01wGDSlxwdL.js?AUIClients/AuthenticationPortalInlineAssets

54.230.83.223

200 OK

521 B

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/01wGDSlxwdL.js?AUIClients/AuthenticationPortalInlineAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (537), with no line terminators
Size
521 B (521 bytes)
Hash
bb96ed60b969cd70fa56cba9081e786a
c07b277dd445c165ea59066fe42c63ee6c89f055
eb34900591af0f016af207410c12dc82670477f584cadf70d4fede9f97035ac2

HTTP Headers

GET /images/I/01wGDSlxwdL.js?AUIClients/AuthenticationPortalInlineAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript; charset=utf-8
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
date: Sun, 09 Jul 2023 08:08:49 GMT
x-amz-ir-id: ff747669-189e-4b46-b1aa-a44638a73699
cache-control: max-age=630720000,public
last-modified: Tue, 22 Dec 2020 19:40:30 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-734,/images/I/01wGDSlxwdL
expires: Sat, 04 Jul 2043 07:23:19 GMT
surrogate-key: x-cache-734 /images/I/01wGDSlxwdL
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 25162386
server-timing: provider;desc="cf",cdn-rid;desc="9sINlidjYGWKADF_-v4pqzBsRADZ2fwD1zJwFwxxsj-S3VB74NDTOw==",cdn-downstream-fbl;dur=3
x-amz-cf-id: 9sINlidjYGWKADF_-v4pqzBsRADZ2fwD1zJwFwxxsj-S3VB74NDTOw==

images-na.ssl-images-amazon.com/images/I/21ZMwVh4T0L._RC|21OJDARBhQL.js,218GJg15I8L.js,31lucpmF4CL.js,2119M3Ks9rL.js,61Csitc2zoL.js_.js?AUIClients/AuthenticationPortalAssets&L3XM6gEo

54.230.83.223

200 OK

110 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/21ZMwVh4T0L._RC|21OJDARBhQL.js,218GJg15I8L.js,31lucpmF4CL.js,2119M3Ks9rL.js,61Csitc2zoL.js_.js?AUIClients/AuthenticationPortalAssets&L3XM6gEo
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (821)
Size
110 kB (110505 bytes)
Hash
5e8b100ded14294842078ee095539fd7
f4bb517490c36e6e327d5ca0925593bdb195fc8a
0e0c84bc1527096163476bfcb308dd3182b513d99b67c5ff81933c8ca0e80ecc

HTTP Headers

GET /images/I/21ZMwVh4T0L._RC|21OJDARBhQL.js,218GJg15I8L.js,31lucpmF4CL.js,2119M3Ks9rL.js,61Csitc2zoL.js_.js?AUIClients/AuthenticationPortalAssets&L3XM6gEo HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript; charset=utf-8
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: b6ba5773-be76-4d6e-9a53-5360428da542
date: Fri, 19 Apr 2024 21:47:09 GMT
cache-control: max-age=630720000,public
last-modified: Mon, 10 Aug 2020 22:19:37 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-900,/images/I/21ZMwVh4T0L
expires: Thu, 14 Apr 2044 21:47:09 GMT
surrogate-key: x-cache-900 /images/I/21ZMwVh4T0L
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 489281
server-timing: provider;desc="cf",cdn-rid;desc="BoVfVdviBOtPwCGKxca4inS5FuKTkWfE01xpXdcJ7ftsdbpsil1wJw==",cdn-downstream-fbl;dur=3
x-amz-cf-id: BoVfVdviBOtPwCGKxca4inS5FuKTkWfE01xpXdcJ7ftsdbpsil1wJw==

images-na.ssl-images-amazon.com/images/I/41lQo3tivsL.js?AUIClients/CVFAssets

54.230.83.223

200 OK

21 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/41lQo3tivsL.js?AUIClients/CVFAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (564)
Size
21 kB (20599 bytes)
Hash
59e01f76455be0c9a40f86af5b72d312
033399e5aa5b5f1c77bcb8716b8fa3f570eaab66
51c336eb2663a85a52a7bbeb3c6a3da181ae9ea4ed2893f196236c162fd3fd12

HTTP Headers

GET /images/I/41lQo3tivsL.js?AUIClients/CVFAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: 1ffa648a-7bb3-41c3-8a21-2224acc5615e
date: Tue, 02 Apr 2024 17:03:02 GMT
cache-control: max-age=630720000,public
last-modified: Tue, 02 Apr 2024 05:41:31 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-157,/images/I/41lQo3tivsL
expires: Mon, 28 Mar 2044 17:03:02 GMT
surrogate-key: x-cache-157 /images/I/41lQo3tivsL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 1975133
server-timing: provider;desc="cf",cdn-rid;desc="XOK7fR3aRH_3PTK3y15CIQzUmEiLz3-ubmgb9LDfeAYLe7HxoRvQSA==",cdn-downstream-fbl;dur=3
x-amz-cf-id: XOK7fR3aRH_3PTK3y15CIQzUmEiLz3-ubmgb9LDfeAYLe7HxoRvQSA==

m.media-amazon.com/images/S/sash/mPGmT0r6IeTyIee.png

151.101.193.16

200 OK

28 kB

URL GET HTTP/3
m.media-amazon.com/images/S/sash/mPGmT0r6IeTyIee.png
IP
151.101.193.16:443
ASN
#54113 FASTLY

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintB6:F4:62:54:F1:7F:55:22:93:2C:25:70:B0:AA:0F:F9:73:11:2D:88
ValidityMon, 18 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
PNG image data, 400 x 750, 8-bit colormap, non-interlaced
Size
28 kB (27972 bytes)
Hash
1b5a1fb097715b1604b21aba92ef6a3e
c4a765aedd886dc04d89e7e93b6a02c59ecb7013
437e95a363a4291060e34ba170e043274e0155821e9be374f35de3c4f13cbaa5

HTTP Headers

GET /images/S/sash/mPGmT0r6IeTyIee.png HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://images-na.ssl-images-amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-length: 27972
content-type: image/png
x-amz-ir-id: 135f8856-57e3-4552-972d-bcf2a44d8e12
expires: Mon, 09 Mar 2043 17:10:08 GMT
cache-control: max-age=630720000,public
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
access-control-allow-origin: *
last-modified: Tue, 17 Nov 2020 23:31:33 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
date: Thu, 25 Apr 2024 13:41:55 GMT
age: 32831902
x-served-by: cache-iad-kjyo7100113-IAD, cache-hel1410034-HEL
x-cache: HIT from fastly, HIT from fastly
server-timing: provider;desc="fy"
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

www.amazon.com/aaut/verify/ap?options=%7B%22clientData%22%3A%22%7B%5C%22sessionId%5C%22%3A%5C%22131-3430566-4101056%5C%22%2C%5C%22marketplaceId%5C%22%3A%5C%22ATVPDKIKX0DER%5C%22%2C%5C%22rid%5C%22%3A%5C%22BGX7CAAPC84T458X9PWN%5C%22%2C%5C%22ubid%5C%22%3A%5C%22133-1228105-5270661%5C%22%2C%5C%22pageType%5C%22%3A%5C%22AuthenticationPortal%5C%22%2C%5C%22appAction%5C%22%3A%5C%22SIGNIN%5C%22%7D%22%2C%22challengeType%22%3Anull%2C%22locale%22%3A%22en-US%22%2C%22externalId%22%3Anull%2C%22enableHeaderFooter%22%3Atrue%2C%22enableBypassMechanism%22%3Afalse%2C%22enableModalView%22%3Afalse%2C%22eventTrigger%22%3A%22PageLoad%22%2C%22aaExternalToken%22%3Anull%2C%22forceJsFlush%22%3Afalse%7D

143.204.50.178

200 OK

47 B

URL POST HTTP/3
www.amazon.com/aaut/verify/ap?options=%7B%22clientData%22%3A%22%7B%5C%22sessionId%5C%22%3A%5C%22131-3430566-4101056%5C%22%2C%5C%22marketplaceId%5C%22%3A%5C%22ATVPDKIKX0DER%5C%22%2C%5C%22rid%5C%22%3A%5C%22BGX7CAAPC84T458X9PWN%5C%22%2C%5C%22ubid%5C%22%3A%5C%22133-1228105-5270661%5C%22%2C%5C%22pageType%5C%22%3A%5C%22AuthenticationPortal%5C%22%2C%5C%22appAction%5C%22%3A%5C%22SIGNIN%5C%22%7D%22%2C%22challengeType%22%3Anull%2C%22locale%22%3A%22en-US%22%2C%22externalId%22%3Anull%2C%22enableHeaderFooter%22%3Atrue%2C%22enableBypassMechanism%22%3Afalse%2C%22enableModalView%22%3Afalse%2C%22eventTrigger%22%3A%22PageLoad%22%2C%22aaExternalToken%22%3Anull%2C%22forceJsFlush%22%3Afalse%7D
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
47 B (47 bytes)
Hash
24d1e2533aa88bcbadbc4becd0b22de1
84831210abcdf05eeda1294c1d1f0b32802f5125
1e5c0a2bb27931b9818dd3e70ffe166247168ab3b517fb24f1b3c777d04f9af0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

POST /aaut/verify/ap?options=%7B%22clientData%22%3A%22%7B%5C%22sessionId%5C%22%3A%5C%22131-3430566-4101056%5C%22%2C%5C%22marketplaceId%5C%22%3A%5C%22ATVPDKIKX0DER%5C%22%2C%5C%22rid%5C%22%3A%5C%22BGX7CAAPC84T458X9PWN%5C%22%2C%5C%22ubid%5C%22%3A%5C%22133-1228105-5270661%5C%22%2C%5C%22pageType%5C%22%3A%5C%22AuthenticationPortal%5C%22%2C%5C%22appAction%5C%22%3A%5C%22SIGNIN%5C%22%7D%22%2C%22challengeType%22%3Anull%2C%22locale%22%3A%22en-US%22%2C%22externalId%22%3Anull%2C%22enableHeaderFooter%22%3Atrue%2C%22enableBypassMechanism%22%3Afalse%2C%22enableModalView%22%3Afalse%2C%22eventTrigger%22%3A%22PageLoad%22%2C%22aaExternalToken%22%3Anull%2C%22forceJsFlush%22%3Afalse%7D HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 547
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Cookie: session-id=131-3430566-4101056; session-id-time=2344772514l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-1228105-5270661; lc-main=en_US; csm-hit=tb:s-BGX7CAAPC84T458X9PWN|1714052515255&t:1714052515827&adb:adblk_no; id_pkel=n0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: Server
date: Thu, 25 Apr 2024 13:41:56 GMT
x-amz-rid: 5CJW3T3XJFEB23NX51W2
cache-control: no-store
content-encoding: gzip
content-language: en-US
content-security-policy: frame-ancestors 'self' id.amazongames.com *.id.amazongames.com *.id.amazongames.com:3000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
amz-aamation-resp: {"sessionToken":"{\"uniqueValidationId\":\"badfcdcd-3d76-4743-a3a2-8821e26a7e71\"}","clientSideContext":"4vWCamZ%2Fm87e%2BuyKQmaKRw%3D%3D.k6ef6mz7iiNPctfegp1EurK91HS8zP04%2FN%2FOseXFGfrUhh8%2BDuvuh2SqLny67Lo8%2B3dB7oObmT9wkCwtk3segttlITpZMDZE%2BW%2BGupMThmjzWO4RlhSnxZ9vvrPjMFf3BeGfMm8use1isYr9ICljddIqoTp6EwDANFbPVNvI9jjEr1c1%2Fap9qU9d%2FhxiFMpWZ%2FqoPZThVAk2VJn7rcGtp1pqW62aysBjOLJMY9LvUiACarsiKin1H5huy9PoNtffViujR3CABkXFlNgRo%2FaGVK4p1Gwo6ZLP1nT%2B%2F%2FJ7BIhbFUU51ObvhNmu3ixacp5%2FAbmagky9eMi7zRNkuKdB5Qo5UhZvQaUwJNZG3GeVLD6JL9%2BGxfqCDnT8ooI%3D","actionType":"PASS"}
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding,Content-Type,Accept-Encoding,User-Agent
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-id: Dg6_iAHGJaRNg4xYcgoINXUUWdcVyHhkA_zahneYB9QAQ9J-XekwgA==

images-na.ssl-images-amazon.com/images/I/A1bfdSKFkcL.js?AUIClients/ACICAssets

54.230.83.223

200 OK

1.5 MB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/A1bfdSKFkcL.js?AUIClients/ACICAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type

Size
1.5 MB (1451069 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/I/A1bfdSKFkcL.js?AUIClients/ACICAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: 5eba3414-836b-47ba-9aae-3e5d90d2033e
date: Thu, 07 Mar 2024 23:42:01 GMT
cache-control: max-age=630720000,public
last-modified: Thu, 07 Mar 2024 21:33:13 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-113,/images/I/A1bfdSKFkcL
expires: Wed, 02 Mar 2044 23:42:01 GMT
surrogate-key: x-cache-113 /images/I/A1bfdSKFkcL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 4197593
server-timing: provider;desc="cf",cdn-rid;desc="EBoJRs61Cw2cdXlmzgzifCdhk3KcDIg1kY0PqGTx0IY8nLYigjBL0A==",cdn-downstream-fbl;dur=3
x-amz-cf-id: EBoJRs61Cw2cdXlmzgzifCdhk3KcDIg1kY0PqGTx0IY8nLYigjBL0A==

images-na.ssl-images-amazon.com/images/I/61yXDIPmT-L._RC|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI

54.230.83.223

200 OK

318 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/61yXDIPmT-L._RC|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type

Size
318 kB (317685 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/I/61yXDIPmT-L._RC|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
date: Sat, 22 Jul 2023 07:31:37 GMT
x-amz-ir-id: 992155fb-aba8-499d-8f37-6aa9b346d964
cache-control: max-age=630720000,public
last-modified: Fri, 23 Sep 2022 18:30:08 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-187,/images/I/61yXDIPmT-L
expires: Thu, 16 Jul 2043 09:52:47 GMT
surrogate-key: x-cache-187 /images/I/61yXDIPmT-L
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24041418
server-timing: provider;desc="cf",cdn-rid;desc="txgEt2WYCaZjpYxet_qgMLXlV33MkCh_8QIaXHKH9sIl7vTMJgwRHQ==",cdn-downstream-fbl;dur=3
x-amz-cf-id: txgEt2WYCaZjpYxet_qgMLXlV33MkCh_8QIaXHKH9sIl7vTMJgwRHQ==

m.media-amazon.com/images/G/01/csm/showads.v2.js?ad_size=-ad-util-&adstype=-ad-sidebar-&advertiser=-ad-banner-

151.101.193.16

200 OK

23 B

URL GET HTTP/2
m.media-amazon.com/images/G/01/csm/showads.v2.js?ad_size=-ad-util-&adstype=-ad-sidebar-&advertiser=-ad-banner-
IP
151.101.193.16:443
ASN
#54113 FASTLY

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
FingerprintB6:F4:62:54:F1:7F:55:22:93:2C:25:70:B0:AA:0F:F9:73:11:2D:88
ValidityMon, 18 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
23 B (23 bytes)
Hash
90b7f9763fcb336a8090ba845ed54dc6
08733250ab11a44aa69da35c044c401de22ec2aa
e755416ba93da91cd7b5def229a65436c9303ed82f42f9ee6dc1c0793a678159

HTTP Headers

GET /images/G/01/csm/showads.v2.js?ad_size=-ad-util-&adstype=-ad-sidebar-&advertiser=-ad-banner- HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amazon.com/
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-javascript
x-amz-ir-id: 0ab23c94-d092-43cb-9dd9-b643f599eb57
cache-control: max-age=86400,public
last-modified: Mon, 28 Nov 2016 08:22:04 GMT
access-control-allow-origin: *
expires: Tue, 05 Sep 2023 13:30:58 GMT
x-nginx-cache-status: HIT
content-encoding: br
accept-ranges: bytes
date: Thu, 25 Apr 2024 13:41:55 GMT
age: 356
x-served-by: cache-iad-kcgs7200178-IAD, cache-hel1410028-HEL
vary: Accept-Encoding
timing-allow-origin: https://www.amazon.com
x-cache: HIT from fastly, HIT from fastly
server-timing: provider;desc="fy"
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/31jdfgcsPAL.js?AUIClients/AmazonUIFormControlsJS

54.230.83.223

200 OK

14 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/31jdfgcsPAL.js?AUIClients/AmazonUIFormControlsJS
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (539)
Size
14 kB (14537 bytes)
Hash
2f9eadd4ca0c94a2924719dc293335ed
7e87fa031017ab7caee9f4ba5a2458b93867c42d
2e5c4e5dd76d19bd957864a5485880b7dd5381be31835dc30dbb276d82652a89

HTTP Headers

GET /images/I/31jdfgcsPAL.js?AUIClients/AmazonUIFormControlsJS HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript; charset=UTF-8
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
date: Tue, 12 Sep 2023 16:24:58 GMT
x-amz-ir-id: a90ae49c-4232-42c8-afd4-94771e69aaa7
cache-control: max-age=630720000,public
last-modified: Thu, 12 Aug 2021 22:54:08 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-067,/images/I/31jdfgcsPAL
expires: Sun, 06 Sep 2043 17:12:37 GMT
surrogate-key: x-cache-067 /images/I/31jdfgcsPAL
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 19516617
server-timing: provider;desc="cf",cdn-rid;desc="bJulDyH2Y7CRFZFnQ6CcDgMM7OOZE9nM8-0Tqbch2eKIPhLhIgJG0A==",cdn-downstream-fbl;dur=4
x-amz-cf-id: bJulDyH2Y7CRFZFnQ6CcDgMM7OOZE9nM8-0Tqbch2eKIPhLhIgJG0A==

images-na.ssl-images-amazon.com/images/I/8177uTcYaeL.js?AUIClients/FWCIMAssets

54.230.83.223

200 OK

263 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/8177uTcYaeL.js?AUIClients/FWCIMAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6950)
Size
263 kB (262914 bytes)
Hash
013178dff361a6281abdd8da2e6633d5
6a0fcaab213fa49f9b0bde2640e969d2b21ac3fa
208fc08aa371ccc5762f46e2888f39133a056f1cb1f9054a11009b843622eeef

HTTP Headers

GET /images/I/8177uTcYaeL.js?AUIClients/FWCIMAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: 2cb133ce-6c86-4b15-b376-20c0c951b9a4
date: Mon, 04 Mar 2024 19:12:32 GMT
cache-control: max-age=630720000,public
last-modified: Mon, 04 Mar 2024 17:50:08 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-945,/images/I/8177uTcYaeL
expires: Sun, 28 Feb 2044 19:12:32 GMT
surrogate-key: x-cache-945 /images/I/8177uTcYaeL
x-nginx-cache-status: MISS
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 4472962
server-timing: provider;desc="cf",cdn-rid;desc="XG-dd9ZzhwjKjeor8w_FNwlYOdvqhlfmSZ6CJQ2hIcxdqV8KDVY55A==",cdn-downstream-fbl;dur=1
x-amz-cf-id: XG-dd9ZzhwjKjeor8w_FNwlYOdvqhlfmSZ6CJQ2hIcxdqV8KDVY55A==

www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0

143.204.50.178

200 OK

142 kB

URL User Request GET HTTP/2
www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
IP
143.204.50.178:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint62:55:EA:53:8D:A8:3F:87:B5:55:C5:54:EE:F6:18:25:C8:72:23:61
ValidityTue, 28 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type

Size
142 kB (142040 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0 HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: session-id=131-3430566-4101056; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html;charset=UTF-8
server: Server
date: Thu, 25 Apr 2024 13:41:54 GMT
x-amz-rid: BGX7CAAPC84T458X9PWN
set-cookie: ap-fid=""; Domain=.amazon.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ap/; Secure
session-id=131-3430566-4101056; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
session-id-time=2344772514l; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
ubid-main=133-1228105-5270661; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
lc-main=en_US; Domain=.amazon.com; Expires=Fri, 25-Apr-2025 13:41:54 GMT; Path=/; Secure
x-xss-protection: 1
x-content-type-options: nosniff
x-ua-compatible: IE=edge
pragma: No-cache
cache-control: max-age=0, no-cache, no-store, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AsgwHqpMBKoV40iCrD9u9pzQcY2Z4rtDsghub7eBIs0sTb-nJ73-NA==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/01SdjaY0ZsL._RC|31jdWD+JB+L.css,513wQu4ouSL.css_.css?AUIClients/AuthenticationPortalAssets

54.230.83.223

200 OK

60 kB

URL GET HTTP/2
images-na.ssl-images-amazon.com/images/I/01SdjaY0ZsL._RC|31jdWD+JB+L.css,513wQu4ouSL.css_.css?AUIClients/AuthenticationPortalAssets
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (43636)
Size
60 kB (60022 bytes)
Hash
e84217c09bba6014d702f5fb7acab7fc
6ad7be7d3890fc107a66f9ba061cd34a5eb6de80
6e9f1d843b055538c18f4eed163fb3e936c0840c39c4a746535e23bfb66d1143

HTTP Headers

GET /images/I/01SdjaY0ZsL._RC|31jdWD+JB+L.css,513wQu4ouSL.css_.css?AUIClients/AuthenticationPortalAssets HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: Server
x-amz-ir-id: b65c1356-f0cc-4e14-b0ec-0a1eb7bc25ec
date: Fri, 12 Apr 2024 01:24:19 GMT
cache-control: max-age=630720000,public
last-modified: Sat, 30 May 2015 02:58:48 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-789,/images/I/01SdjaY0ZsL
expires: Thu, 07 Apr 2044 01:24:19 GMT
surrogate-key: x-cache-789 /images/I/01SdjaY0ZsL
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 1027186
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mrLl59PkT7IkQF2KTy7R0reCcly4F0DKeeUKmRVZOh7Gp6GHilnJPA==
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/I/8135BpGZX3L.js?AUIClients/SiegeClientSideEncryptionAUI

54.230.83.223

200 OK

331 kB

URL GET HTTP/3
images-na.ssl-images-amazon.com/images/I/8135BpGZX3L.js?AUIClients/SiegeClientSideEncryptionAUI
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type

Size
331 kB (330729 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /images/I/8135BpGZX3L.js?AUIClients/SiegeClientSideEncryptionAUI HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
server: Server
date: Tue, 11 Jul 2023 10:54:03 GMT
x-amz-ir-id: 73a936a6-75bb-443e-a214-872daaef2e69
cache-control: max-age=630720000,public
last-modified: Wed, 01 Mar 2023 14:40:05 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-865,/images/I/8135BpGZX3L
expires: Sun, 05 Jul 2043 09:58:05 GMT
surrogate-key: x-cache-865 /images/I/8135BpGZX3L
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24979672
server-timing: provider;desc="cf",cdn-rid;desc="ojjz5i5I6GHcYY0OVr5ZpRY8bmOceuSclwJq4ugHWlMiSqNAb1O3cg==",cdn-downstream-fbl;dur=4
x-amz-cf-id: ojjz5i5I6GHcYY0OVr5ZpRY8bmOceuSclwJq4ugHWlMiSqNAb1O3cg==

images-na.ssl-images-amazon.com/images/I/61A6IErPNXL._RC|11Fd9tJOdtL.css,11tfezETfFL.css,31Q3id-QR0L.css,31U9HrBLKmL.css_.css?AUIClients/AmazonUI

54.230.83.223

200 OK

136 kB

URL GET HTTP/2
images-na.ssl-images-amazon.com/images/I/61A6IErPNXL._RC|11Fd9tJOdtL.css,11tfezETfFL.css,31Q3id-QR0L.css,31U9HrBLKmL.css_.css?AUIClients/AmazonUI
IP
54.230.83.223:443
ASN
#16509 AMAZON-02

Requested by
https://www.amazon.com/ap/signin?openid.pape.max_auth_age=3600&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Fmessaging%2F5567000274905878023%3FmarketplaceId%3DATVPDKIKX0DER%26messageId%3D1684067772116359907%26ref_%3Dbsm_email_proactive%26id%3Damzn1.account.OJ72QFJANV4A5FEMVU2TO2LJGV3GG3RTO5RWC2BTM5QWYNTXO5Y3VDH2YB4P5UHVBIDSW5HWU3ORNRD2IBKVQYNCWCU6HANTKH7N6OI&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.assoc_handle=amzn_bsm_messaging_us&openid.mode=checkid_setup&language=en_US&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0
Certificate
IssuerDigiCert Inc
Subjectimages-na.ssl-images-amazon.com
Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
136 kB (136113 bytes)
Hash
b037ce89f289d2ae00fc5f27a533fb30
6cab1c574b2c2544eb3f32f7aed023f442a61c75
65e3ba66df0c9c45a17ac62283069d21d5e4a473d649a1d574a562a44f9a09c3

HTTP Headers

GET /images/I/61A6IErPNXL._RC|11Fd9tJOdtL.css,11tfezETfFL.css,31Q3id-QR0L.css,31U9HrBLKmL.css_.css?AUIClients/AmazonUI HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=UTF-8
server: Server
date: Sat, 22 Jul 2023 11:00:25 GMT
x-amz-ir-id: d29fcfaf-e50b-4ed8-bf9c-ff43673a7620
cache-control: max-age=630720000,public
last-modified: Wed, 06 Jan 2021 02:50:26 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-034,/images/I/61A6IErPNXL
expires: Thu, 16 Jul 2043 11:27:04 GMT
surrogate-key: x-cache-034 /images/I/61A6IErPNXL
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24028890
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-P1",cdn-rid;desc="4qh1-Kme5HEwk0-Y8BK7omy0Ig7nsqk7Af-6GPBN-pmMIpkg64L0bw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=2,provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4qh1-Kme5HEwk0-Y8BK7omy0Ig7nsqk7Af-6GPBN-pmMIpkg64L0bw==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (32)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML