{"report_id":"afb859ac-4121-441a-a29a-b85e317412b8","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-07-18T17:29:36Z","url":{"schema":"http","addr":"amazonglobal1.com","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":0,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"amazonglobal1.com/#/login","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"title":"Amazon","dom":{"size":262877,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (60933)","md5":"78d4c0330d2bc8ba1df5c7ea133b74a4","sha1":"6cfaa9049d59345f25b6459d90bc28b470db2602","sha256":"b0f3cc10760dc1adf61410c4c3b0ba3f95cad8cf342332ca3734a9b9bd6026cb","sha512":"443a514a3333f9ae61973a01c5b53e285b8415e2db6762ead6a04ccfb1b795cd7b76e76f4d8118808524623f9a0cbe40beb9a2e1546d42dce6db6296e5c9a96e","ssdeep":"1536:0vD1E+tzbcmLlLWKtvN4LNTr/EUIZeGtHLPCmeh7NrFQ1JfWnh2KyusbZSwuJgNz:8hFFHKrFYpAhP//fkuQhHEV/Uk8F","tlshash":"d1441bbad08812ea3333c862db807399b5a9f672e5811e59f10e612d4fc77950387f6d","dom_hash":"domhashcddb3f37170545dfbfb50fee9cc9f847","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazonglobal1.com","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":0,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:29:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"amazonglobal1.com","ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":42,"request_count":7,"received_data":1576079,"sent_data":3495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"amazonglobal1.com/static/js/index.js?t=11","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca80ed238d50923c2c3bdaeadae78a6","sha1":"e594aaafd00943b898e09778f468d7fb83ca2248","sha256":"93a01f3a8f996e99ccce558a13efdae9db90601a092d7110fa61e7309f074f24","sha512":"71e9bacfb65123edfa52b6834931a306651da8e60fb344dac22ae6bd2dcbcc10527ed21c9b27816e4554c519918042f0d262e58e1a80af5ccb75862ba87e7dd1","ssdeep":"12288:zeLYiihxQGCFPmJoDOhBddtgYeU9GPoBnhg1AO3:IExnJOOhBddtgYzXngJ","tlshash":"b8455bdef1c470d613a3e1a1432f220ab276f825e408885cf526e4dd5ee9a6d1267f3d","size":1258149,"data":"","first_seen":"2024-12-02T11:58:28.216155Z","last_seen":"2026-07-19T01:43:52.037039Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonglobal1.com/static/js/chunk-752bf304.js","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c46c1a36743b984b0f3b217e69defaab","sha1":"12cb9e31bc256fb8c73691948c806acb728c23fc","sha256":"6bd59d6d317976cf79866dc9b87f8976638ea1afa19ae970d05e8df4c36ef068","sha512":"f137ca119d66e93f38765be2f59f63b1bbb9e424440360b61e27151b658448d55178784a4e86227e8bb582260c2c5ab1e0cf0bf3e0aa720b7eee601272e35a8b","ssdeep":"6144:4QnLR41J9ruc5pAsvjU9qXhFKb4UXTj/l0KuSB:4QnLR4X1X4kFKHe+","tlshash":"5e641927608aa12cec3bd051211e1674a461afb7d01042d6f735ee658fe7eba273e71c","size":308970,"data":"","first_seen":"2024-12-02T11:58:28.218261Z","last_seen":"2026-07-19T01:43:52.032359Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazonglobal1.com/api/v2/get_u?s_u=\u0026s_l=\u0026s_t=1784395749\u0026s_h=71a27b","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:09.202Z","timestamp":1784395749202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /api/v2/get_u?s_u=\u0026s_l=\u0026s_t=1784395749\u0026s_h=71a27b HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 270\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Access-Token,token,Token,lang\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-request-headers: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270,"size_decoded":952,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83668e46130976b3048c6c3646c64434","sha1":"b683e62756d4f237d3d1207320ef09155a2020cd","sha256":"696e2d8b527d3ef0f3cbb2f6e288453dae3786ecaf5d15c718c80a3ef4f005bb","sha512":"cd96f9aa13c1b808b3f227d993a69d1856d4b2ae7effa4f11768c39d2dd4aa5b5ac3e6973318955592edd5b4ca48a10dde65a7767f217b3bc24f8ca318dd8ef7","ssdeep":"","tlshash":"86d0ebc0ed1580f3dc0b98762238c808cc433038287bd08228e80736b043cbae384c41","first_seen":"2024-06-07T09:34:57Z","last_seen":"2026-07-19T01:43:52.032978Z","times_seen":32,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/api/v2/lot_get_servertime?s_u=\u0026s_l=\u0026s_t=1784395749\u0026s_h=71a27b","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:09.206Z","timestamp":1784395749206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /api/v2/lot_get_servertime?s_u=\u0026s_l=\u0026s_t=1784395749\u0026s_h=71a27b HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Access-Token,token,Token,lang\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-request-headers: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":718,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d77f3c547a7006cfd7cd3891a9dd29","sha1":"65b42fca90c9eb180e91b412f63daf13c27f4012","sha256":"ac105249a63e6656d79e58800a01bd7431054f01a51b614d10fb74650a1afc50","sha512":"68fb4b260a1a793bfb1da5bd053b3fbf863e4758c2faed4e60d8bca06b7bbb10b004fc7e087b5bd5dfa6a0113de60ad24d0a271a1313dab25b1c1ce80f3a50d9","ssdeep":"","tlshash":"ca8004050c445017105335150d4f5744c33c1414014445000d5c1f3d04157105401c1d","first_seen":"2026-07-18T17:29:42.412032Z","last_seen":"2026-07-18T17:29:42.412032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:29:06.202Z","timestamp":1784395746202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 29 Nov 2024 16:12:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6749e7dc-1458\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5208,"size_decoded":1562,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (614)","md5":"b2da7b0c274912643fdb3fe60d09f890","sha1":"b7f01f8a3da7266ac03af652ae4da5aab0ee71ea","sha256":"81b6dedaa261299e0cffc3272687cfa2e4ea7e8c8500f1174ef6383f2102b936","sha512":"6eac098d8ac1ed6de87921a4e7b8addb86c137fc1d0b92c4991fdb10c209fa30bb11e4018d703634e396d710f3a16e647f4e7112e115caf09b989ca1723dea78","ssdeep":"96:J3ykqQmUObvIa1Ju+tzbcmLlLWKpskvN4LNTr/EHRra2Rrat7b488888888888Q:J3yldU8vD1Ju+tzbcmLlLWKKkvN4LNTM","tlshash":"bab1dde7255381489b07a96567fc0a319070d84b2845fddcba8fc18daf92da48ae3377","first_seen":"2025-07-09T10:14:38.012236Z","last_seen":"2026-07-19T01:43:52.034971Z","times_seen":21,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":80,"connect":210,"send":0,"wait":210,"receive":0,"ssl":437},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/static/js/index.js?t=11","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:07.468Z","timestamp":1784395747468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /static/js/index.js?t=11 HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Nov 2024 16:09:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6749e730-1332a5\"\r\nexpires: Sun, 19 Jul 2026 05:29:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1258149,"size_decoded":403700,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43277)","md5":"5818482518d1450924d4b74fa7663ea8","sha1":"9385a48232df203e495ec34cd4a93483d3ae5fa7","sha256":"5177656e42ec8e3ea3874e60f34c0406009d698b640be31a9f48b3dda8692180","sha512":"2eb1d0c373a6cc997799689bedec1d828eed9c130fef9f75c85c2bf3a54914f8657427de33a6a9fc9f7501f888911a8238bdd74f7767bc720c0c747cb2b158bf","ssdeep":"6144:qi7qZTzRLzME1biiWxQGkS6yiPmtYvcQrFYWBNfkzhMnwdGTOXmyJ/BwyHAYP1Mb:zeLYiihxQGCFPmJoDOhBddtgYeU9GPoc","tlshash":"36257d9e72c5b06943a3a0b0407f110af337a815a408859cf625f5e99ebee5d613bf3d","first_seen":"2026-07-18T17:29:42.418236Z","last_seen":"2026-07-19T01:43:52.035747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/images/icon.png","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:08.673Z","timestamp":1784395748673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6971054e-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-19T03:20:29.071843Z","times_seen":313056,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/favicon.ico","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:08.675Z","timestamp":1784395748675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6971054e-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-19T03:20:29.071843Z","times_seen":313056,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonglobal1.com/static/js/chunk-752bf304.js","fqdn":"amazonglobal1.com","domain":"amazonglobal1.com","tld":"com"},"ip":{"addr":"141.11.84.163","port":443,"asn":397630,"as":"AS-BLAZINGSEO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonglobal1.com/","date":"2026-07-18T17:29:09.180Z","timestamp":1784395749180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonglobal1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Jul 2026 06:00:00 GMT","end":"Fri, 16 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FE:D9:E1:62:AA:85:D0:51:DF:98:F4:2A:F2:85:D5:DC:23:44:17:34","sha256":"44:4E:8C:BD:62:D0:79:D4:B0:40:73:36:54:53:73:7E:A4:7C:C8:AE:FC:40:D0:AF:B3:10:A3:60:3B:9E:93:66"}}},"request":{"raw":"GET /static/js/chunk-752bf304.js HTTP/1.1\r\nHost: amazonglobal1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonglobal1.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:29:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Nov 2024 16:09:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6749e730-4b6ea\"\r\nexpires: Sun, 19 Jul 2026 05:29:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308970,"size_decoded":98965,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65382), with no line terminators","md5":"c46c1a36743b984b0f3b217e69defaab","sha1":"12cb9e31bc256fb8c73691948c806acb728c23fc","sha256":"6bd59d6d317976cf79866dc9b87f8976638ea1afa19ae970d05e8df4c36ef068","sha512":"f137ca119d66e93f38765be2f59f63b1bbb9e424440360b61e27151b658448d55178784a4e86227e8bb582260c2c5ab1e0cf0bf3e0aa720b7eee601272e35a8b","ssdeep":"6144:4QnLR41J9ruc5pAsvjU9qXhFKb4UXTj/l0KuSB:4QnLR4X1X4kFKHe+","tlshash":"5e641927608aa12cec3bd051211e1674a461afb7d01042d6f735ee658fe7eba273e71c","first_seen":"2024-12-02T11:58:28.218261Z","last_seen":"2026-07-19T01:43:52.032359Z","times_seen":23,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"amazonglobal1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"amazonglobal1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}