Report - amazon.jpgoodbuy.com/gp/css/order-history

Report Overview

Submitted URL
amazon.jpgoodbuy.com/gp/css/order-history
IP
126.4.163.178
ASN
#17676 Softbank BB Corp.
Submitted
2022-11-01 00:28:20
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.8 kB	34.160.144.191
images-na.ssl-images-amazon.com	842	2012-10-30T03:08:43Z	2023-03-10T11:27:16Z	2.5 kB	27 kB	143.204.54.16
fls-fe.amazon.co.jp	72445	2012-10-02T08:38:24Z	2023-03-08T07:35:57Z	1.2 kB	1.2 kB	52.94.215.175
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.2 kB	57 kB	34.120.237.76
images-fe.ssl-images-amazon.com	22965	2013-06-05T15:04:00Z	2023-03-10T09:21:17Z	911 B	1.7 kB	143.204.54.16
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2.0 kB	5.3 kB	23.36.77.32
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	1.0 kB	2.4 kB	93.184.220.29
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
amazon.jpgoodbuy.com	unknown	2019-02-22T04:47:39Z	2023-03-08T06:56:35Z	704 B	21 kB	126.4.163.178
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	54.187.146.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-10-31	medium	amazon.jpgoodbuy.com/gp/css/order-history	Amazon.com Inc.
2022-10-27	medium	amazon.jpgoodbuy.com/	Amazon.com Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	amazon.jpgoodbuy.com/gp/css/order-history	393 B	2023-03-10	2023-03-10
Pretty URL amazon.jpgoodbuy.com/gp/css/order-history IP 126.4.163.178 ASN #17676 Softbank BB Corp. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 18:23:33 Last Seen2023-03-10 18:23:33 Times Seen1 Hash 9deddc604bda0c9a5798a9d9cdaf7700 4d90183ba10b50a29fadf4aa92117c184c8642d1 408fc97548467b32b104f024ada0ff3685bd16b70c5f8908933afff4eb30fae9 Loading...

	amazon.jpgoodbuy.com/gp/css/order-history	187 B	2023-03-10	2023-03-10
Pretty URL amazon.jpgoodbuy.com/gp/css/order-history IP 126.4.163.178 ASN #17676 Softbank BB Corp. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 18:23:33 Last Seen2023-03-10 18:23:33 Times Seen1 Hash a72dfee7637f90cfcda2b7e439cc72df b7a1be334ff89818cb7eaaf463c99a8373ba18af 2654d3184e4f176e0db9c15ab21d93df2400b5ce243ff1ab7058be347fa2e641 Loading...

	amazon.jpgoodbuy.com/gp/css/order-history	503 B	2023-03-10	2023-03-10
Pretty URL amazon.jpgoodbuy.com/gp/css/order-history IP 126.4.163.178 ASN #17676 Softbank BB Corp. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 18:12:43 Last Seen2023-03-10 18:23:33 Times Seen1 Hash a05d6a6b9ead371c6bb67879ec71105b 169084bef84b4123a042eee58aaeb446935f5aaa 1657ecb5720d234be5b55b06e70b3fafb938ca4b023cf6b86e61039d94a4ac27 Loading...

	images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js	1.8 kB	2023-03-07	2024-04-25
Pretty URL images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js IP 143.204.54.16 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-04-25 04:38:00 Times Seen926 Hash c2ec838fe27f97d3fd0074ce8bcaf9c3 87feacf794f2465e34a198f1243cfefdc428bc58 35cf72b3f65845c32617eb726119bbdd969738b7d62bb760c4381e82ce37ac4a Loading...

	images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js	1.8 kB	2023-03-07	2024-04-25
Pretty URL images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js IP 143.204.54.16 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-04-25 04:38:00 Times Seen949 Hash 6d68177fa6061598e9509dc4b5bdd08d 3be11c9cf7d3fd0ec940798c3af6718e7db15e79 0a7e3153f44d0e51c73dad9fa3034a14446bedbafc38e477915382dd02269123 Loading...

	images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js	7.2 kB	2023-03-07	2024-04-25
Pretty URL images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js IP 143.204.54.16 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-04-25 04:38:00 Times Seen892 Hash 1c399ad9886cab69575e1e5ee15c61a1 5b4a4fae777b5a20a6751361f0c64b9d590e37ba a538a2b295512c2a3b74f63e74047db79140733da941fb0fca2b95a1dfdada37 Loading...

	images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js	20 kB	2023-03-07	2024-04-25
Pretty URL images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js IP 143.204.54.16 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:39 Last Seen2024-04-25 04:38:00 Times Seen1223 Hash 64ee8d01bbfe60d6eff43818778fb34e 51171fbdd28e1a7a61e922e8f0272af8bc74d37b 877c2c2a2da0a1a6c0ad0d7ac8071046a1d726e5ab9c63509e3786b8c8ec5042 Loading...

		Size	First Seen	Last Seen
	#1 Write - a2fb00924ec920fd13a79b1561623c1e	91 B	2023-03-10	2023-03-10
Pretty Observations First Seen2023-03-10 18:23:33 Last Seen2023-03-10 18:23:33 Times Seen1 Hash a2fb00924ec920fd13a79b1561623c1e 4790c95e48e7880fe171a4c4e887acc9339a5e2b 1810ae47689e7835e6903cef969a999a9ad40ccf9b684bc3555ed2829bc6d259 Loading...

HTTP Transactions (30)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59be8dfdd6f4ab82f394d3d5b927e065
dc8e8f1bbae495f84322e5efd0c42a39ef5be56c
7f251408f64b28bebfe96f3db5c3dde3d5ad5febbaf2964b3516c114eaa51f4d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7F251408F64B28BEBFE96F3DB5C3DDE3D5AD5FEBBAF2964B3516C114EAA51F4D"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3229
Expires: Tue, 01 Nov 2022 01:21:58 GMT
Date: Tue, 01 Nov 2022 00:28:09 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
37c018b30f8ecbca9d4c0606287c01d8
9f1ce6e9b6ee40dc53da9f686c35c985485b2425
e16c2bf8d2e615c8fcd5adc5faf01cd9cc523d0ef7fa29b648b372d2ecdc95c3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5819
Cache-Control: max-age=124795
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 00:28:09 GMT
Etag: "635f95d9-1d7"
Expires: Wed, 02 Nov 2022 11:08:04 GMT
Last-Modified: Mon, 31 Oct 2022 09:31:05 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
37c018b30f8ecbca9d4c0606287c01d8
9f1ce6e9b6ee40dc53da9f686c35c985485b2425
e16c2bf8d2e615c8fcd5adc5faf01cd9cc523d0ef7fa29b648b372d2ecdc95c3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4400
Cache-Control: max-age=123376
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 00:28:09 GMT
Etag: "635f95d9-1d7"
Expires: Wed, 02 Nov 2022 10:44:25 GMT
Last-Modified: Mon, 31 Oct 2022 09:31:05 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e59d16ee0744a08cb29d0f7e664a3827
f64722982e24ecc948f599edc76e36250ddf5112
2ef6e5bddd86663d50c9c66bc8b46f92534f4d0ef5e490a24fb876355ec006b9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EF6E5BDDD86663D50C9C66BC8B46F92534F4D0EF5E490A24FB876355EC006B9"
Last-Modified: Sat, 29 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17620
Expires: Tue, 01 Nov 2022 05:21:49 GMT
Date: Tue, 01 Nov 2022 00:28:09 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: kCdLOHaRMNrTgdY63zLfoX7KipzJFO/RIt7RiEHRhofWzzO1pupN0dadI+CKvwHrAiNBjUNEdYM=
x-amz-request-id: 8PPEW9HNZD00GEZQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 01 Nov 2022 00:11:45 GMT
age: 984
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 01 Nov 2022 00:28:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

amazon.jpgoodbuy.com/gp/css/order-history

126.4.163.178

200 OK

2.3 kB

URL HTTP/1.1
amazon.jpgoodbuy.com/gp/css/order-history
IP
126.4.163.178:0
ASN
#17676 Softbank BB Corp.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Non-ISO extended-ASCII text
Size
2.3 kB (2337 bytes)
Hash
e7d353c09ea2b96d1544eb5008f8e0dd
bef9ec229e0dde5bda224cf3c3b0ddafc3328073
df93abb9a3f05b1b593d24905ab1087ccedbf5f5dd102100c7f5e61a80a12217

Detections

Analyzer	Verdict	Alert
openphish	Amazon.com Inc.

HTTP Headers

GET /gp/css/order-history HTTP/1.1
Host: amazon.jpgoodbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 01:23:46 GMT
Content-Type: text/html
Content-Length: 2337
Connection: keep-alive
x-amz-rid: TTQF0QBS414HM3WWEATW
Content-Encoding: gzip
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
Vary: Accept-Encoding
X-Cache: MISS

images-na.ssl-images-amazon.com/captcha/cucusdhr/Captcha_ietkwxmnik.jpg

143.204.54.16

200 OK

5.6 kB

URL HTTP/2
images-na.ssl-images-amazon.com/captcha/cucusdhr/Captcha_ietkwxmnik.jpg
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x70, components 1\012- data
Size
5.6 kB (5568 bytes)
Hash
ad4cfa56353c74ccc133691b48990bc8
82935bb8799cc765cd7fb9a68d779131b5df12c2
2f7512714f3ebb1eb4f2c6500deaee56f0f428ba0b79961a0b8c336abe22ea4d

HTTP Headers

GET /captcha/cucusdhr/Captcha_ietkwxmnik.jpg HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 5568
server: Server
x-amz-ir-id: bc65046b-c0ae-4748-9a56-7e1d77ae27e0
surrogate-key: x-cache-748 /captcha/cucusdhr/Captcha_ietkwxmnik
edge-cache-tag: x-cache-748,/captcha/cucusdhr/Captcha_ietkwxmnik
access-control-allow-origin: *
last-modified: Wed, 08 Feb 2012 17:14:45 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
date: Mon, 31 Oct 2022 13:12:22 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vsqK7-aZzcc6GzyVglRsG8yElVoiWrSI43kAH8gg9Q59zV4j4jC8tg==
age: 40547
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-C1",cdn-rid;desc="vsqK7-aZzcc6GzyVglRsG8yElVoiWrSI43kAH8gg9Q59zV4j4jC8tg==",cdn-hit-layer;desc="REC",cdn-downstream-fbl;dur=22
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png

143.204.54.16

200 OK

17 kB

URL HTTP/2
images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type
PNG image data, 400 x 600, 8-bit colormap, non-interlaced\012- data
Size
17 kB (16972 bytes)
Hash
7d7a0cfb8ec9eb548c63bfd8f743181c
76cab36d1597e40654951dec1be50c289252caaa
49ff798368f6e4367d03a44af687d47609ca4608d02b1a099281f88c910cf1aa

HTTP Headers

GET /images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 16972
server: Server
date: Tue, 31 May 2022 10:41:49 GMT
x-amz-ir-id: 76c8afe3-0461-4e7c-9836-611978298555
expires: Mon, 26 May 2042 05:17:17 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-868 /images/G/01/amazonui/sprites/aui_sprite_0007-1x
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-868,/images/G/01/amazonui/sprites/aui_sprite_0007-1x
access-control-allow-origin: *
last-modified: Wed, 15 May 2013 01:55:34 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Tw0U8W8oHcMnzLsxCVzoR8x04_wS2Y13wBy04PiecmY5Dw4X0S53dg==
age: 13268781
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f646a3a97223c35e424ccb52d0ff73da
d88c49b4ac278348e6c669792334170911fb43dd
065a4e4db1b5f7d8231afbd3cb75ce74f0a74aee63bc12a79f5a8d050f55a05b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6377
Cache-Control: max-age=120294
Content-Type: application/ocsp-response
Date: Tue, 01 Nov 2022 00:28:10 GMT
Etag: "635f8217-1d7"
Expires: Wed, 02 Nov 2022 09:53:04 GMT
Last-Modified: Mon, 31 Oct 2022 08:06:47 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.187.146.10

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.187.146.10:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: n84DPEpYjzVzQurOkEsHFA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nlfajl8o9yK0dsPAsfn5e7u0FIE=

amazon.jpgoodbuy.com/favicon.ico

126.4.163.178

200 OK

18 kB

URL HTTP/1.1
amazon.jpgoodbuy.com/favicon.ico
IP
126.4.163.178:0
ASN
#17676 Softbank BB Corp.

File type
MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
18 kB (17542 bytes)
Hash
ca6619b86c2f6e6068b69ba3aaddb7e4
c44a1bb9d14385334eb851fbb0afb19d961c1ee7
17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09

Detections

Analyzer	Verdict	Alert
openphish	Amazon.com Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: amazon.jpgoodbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/gp/css/order-history

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Nov 2022 01:23:47 GMT
Content-Type: image/x-icon
Content-Length: 17542
Connection: keep-alive
x-amz-rid: 5KDZQ1KN2GPDGSW6NQWF
ETag: "4486-490c87c5a6340"
Last-Modified: Tue, 21 Sep 2010 17:37:41 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
X-Cache: MISS
Accept-Ranges: bytes

fls-fe.amazon.co.jp/1/oc-csi/1/OP/requestId=TTQF0QBS414HM3WWEATW&js=1

52.94.215.175

200 OK

43 B

URL HTTP/1.1
fls-fe.amazon.co.jp/1/oc-csi/1/OP/requestId=TTQF0QBS414HM3WWEATW&js=1
IP
52.94.215.175:0
ASN
#16509 AMAZON-02

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
e68cc604cab69bf03b8cd228d940f5ef
15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce

HTTP Headers

GET /1/oc-csi/1/OP/requestId=TTQF0QBS414HM3WWEATW&js=1 HTTP/1.1
Host: fls-fe.amazon.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: Server
Date: Tue, 01 Nov 2022 00:28:10 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: BTP6Y26N4Y6MK226YZ3G
x-amzn-RequestId: adbfb20e-6c1b-4138-9ac4-98b9b535fe23
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6174
Expires: Tue, 01 Nov 2022 02:11:05 GMT
Date: Tue, 01 Nov 2022 00:28:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6174
Expires: Tue, 01 Nov 2022 02:11:05 GMT
Date: Tue, 01 Nov 2022 00:28:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6174
Expires: Tue, 01 Nov 2022 02:11:05 GMT
Date: Tue, 01 Nov 2022 00:28:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f286e64f8de8d0158fe2a83cea74da23
b0e9fd228565aaf58ec455d743e39559a548fdbb
21c7fb0f3d2486d6655b5d6817dd90faafa18836c820a684215f9a29f1a4451c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21C7FB0F3D2486D6655B5D6817DD90FAAFA18836C820A684215F9A29F1A4451C"
Last-Modified: Mon, 31 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6174
Expires: Tue, 01 Nov 2022 02:11:05 GMT
Date: Tue, 01 Nov 2022 00:28:11 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbda5ce4b-af3b-4a54-90ae-66ca2bd79c74.jpeg

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbda5ce4b-af3b-4a54-90ae-66ca2bd79c74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9228 bytes)
Hash
ad9ea47c35e2e8616f6a5ba094bf9557
76637be143eba92551ca16d0c688bf452b2268f2
e4422a077bb7f374b27ac89a2669bcfe8aad7fa2ce93fd8978c4c11d64a19630

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbda5ce4b-af3b-4a54-90ae-66ca2bd79c74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9228
x-amzn-requestid: 0345b7ec-cbab-456d-89dc-ed5eb66bf7da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a49cnEvKoAMFoag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636042b6-66f23f3158287e0b4ac3f1a6;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:48:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sOGvrZcop6CUthLY9if2t39bX7of62zyW-GHAhV3Yn5hCXW3x6cTQA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 22:05:04 GMT
age: 8587
etag: "76637be143eba92551ca16d0c688bf452b2268f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f483454-b074-4576-b487-76a14ccb2059.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10527 bytes)
Hash
bd006407a4ea0fbeec2f1351a71f30bc
d1625420cdc79643e759247b0e9ac89dadfbe956
fd461665ee463fad26300630684a11e3c520485e3b001c2f08439d50589ddbb7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f483454-b074-4576-b487-76a14ccb2059.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10527
x-amzn-requestid: de61bb34-5db0-4e30-8937-d9eb960bf406
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a4vAnHBpIAMFkZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63602b9d-1f4d59b63a268ec06144afbb;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 20:10:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YiQiNvM-5wyduNFW_yEQF44vnaYMuL9oWOaBujo48gqVqo-XnhXjFQ==
via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 22:21:09 GMT
age: 7622
etag: "d1625420cdc79643e759247b0e9ac89dadfbe956"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac784420-6bab-4f05-bd56-3132d4132188.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9484 bytes)
Hash
a5be7f38571f5a343ef14f05b10b6f1e
dd9915817bb5241ef5ecd488f168c5ffb088b694
fb40fe8abf447dc4b72c993834a64b2393b7ab780c472b777c465b78bbe9d83a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac784420-6bab-4f05-bd56-3132d4132188.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9484
x-amzn-requestid: 82f4cd3d-00c6-4be8-b93d-086d833fd54c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47IuEkkIAMFnJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f04-5e617c1263732643101a24d0;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Zx9ZiOOOoSJAf-MyNJJvnp_0ziW2Nla91O4baFtHsbgh4yJmJCqjxA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:51:16 GMT
age: 9415
etag: "dd9915817bb5241ef5ecd488f168c5ffb088b694"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F601f85a4-810b-4251-8f3b-08e2b832a061.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.6 kB (4571 bytes)
Hash
e8a237b3e7dcb5481bdb688f9d62b7dd
c1c81e9f689d7faa1193baba9895ffc8b0d2de55
ef622da986a55b2a727bddd4295f159ee4fd9d02dfcd96b0ba72a29c9ba4ce17

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F601f85a4-810b-4251-8f3b-08e2b832a061.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4571
x-amzn-requestid: 25c92e9d-bf11-461a-8b8b-c2fc894c003f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47JZGyQIAMFmmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f08-41da8005238fe0ec28530f24;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:56 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lUYX1_V2ISmfo2TOPlbmDM-c37YCAd6BzsVdwR7ozxJHI7Of_uamqA==
via: 1.1 94be61e339880d0097634de6934f7710.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:55:24 GMT
age: 9167
etag: "c1c81e9f689d7faa1193baba9895ffc8b0d2de55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4402157-b00a-4732-b2df-0f3e2b655219.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.5 kB (4456 bytes)
Hash
f09a2a14bf888ca33df5b059c73f89f8
289a0c698c3a826f0614f6dec56d15c2c3320519
946007230f6cdd732a1c6bf3aa4073738ac426cdfda843cd9a9981f122fb8608

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4402157-b00a-4732-b2df-0f3e2b655219.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4456
x-amzn-requestid: 58bbf579-518e-4db6-b5a7-729aa207437e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a47JZH56oAMFraw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63603f08-6c2770552a9f25b14ac3e32a;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 21:32:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CXGpDRQzYxI-0aHpKiU-GhPoEJaKEdn9k5AYJqlx3rUvpMG2IVp-Ew==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 21:50:40 GMT
age: 9451
etag: "289a0c698c3a826f0614f6dec56d15c2c3320519"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe25c94f5-8c68-4873-a7f5-489cda20f930.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12030 bytes)
Hash
b448be568235c7958c7065472a5210d8
af378bf63558e2e106d3b0dbb63301e4251b872c
bc33acba022831dd100a88d113a6da1d38601121fd26371c1263d7a5bc8f8604

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe25c94f5-8c68-4873-a7f5-489cda20f930.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12030
x-amzn-requestid: ef4bfc75-bf05-4c03-b903-3bc5b4e8cd00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aV_JkG_-oAMFTlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63524570-1a33322a67d24dec3b5ef98b;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:08:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ek7QXLm-W9D2eGwS-zvdZwb2EMT3rc7RVzP7ienRs1MsaE8dqjwpow==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 31 Oct 2022 13:52:21 GMT
age: 38150
etag: "af378bf63558e2e106d3b0dbb63301e4251b872c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fls-fe.amazon.co.jp/1/batch/1/OE/

52.94.215.175

301 Moved Permanently

163 B

URL HTTP/1.1
fls-fe.amazon.co.jp/1/batch/1/OE/
IP
52.94.215.175:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
163 B (163 bytes)
Hash
c4bede7d6b8e56951ae0c0e194153af0
f11f69eaee4f3cd0c75d0f41f1f1d213a359d5b7
b691e78554674f4bb12223fcd4d40aa99c80a83f96d7c251eb116afb33c5fe8a

HTTP Headers

POST /1/batch/1/OE/ HTTP/1.1
Host: fls-fe.amazon.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 20865
Origin: http://amazon.jpgoodbuy.com
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/

HTTP/1.1 301 Moved Permanently
Server: Server
Date: Tue, 01 Nov 2022 00:28:11 GMT
Content-Type: text/html
Content-Length: 163
Connection: keep-alive
Location: https://fls-fe.amazon.co.jp/1/batch/1/OE/

fls-fe.amazon.co.jp/1/batch/1/OE/

52.94.215.175

500 Internal Server Error

87 B

URL HTTP/1.1
fls-fe.amazon.co.jp/1/batch/1/OE/
IP
52.94.215.175:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
87 B (87 bytes)
Hash
938e3ecf85810d57bff6e3c7a35dbac5
d156801b5bdfe0fa32bd2a7b34826e58dbd9d01e
f89dc7d294120ea77a572fd063c2a9d9bcb2699e1608b6fc7732158bc090e82c

HTTP Headers

GET /1/batch/1/OE/ HTTP/1.1
Host: fls-fe.amazon.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://amazon.jpgoodbuy.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 500 Internal Server Error
Server: Server
Date: Tue, 01 Nov 2022 00:28:12 GMT
Content-Type: text/xml
Content-Length: 87
Connection: keep-alive
x-amz-rid: 2DS67R8FKHFT73Z9S70T
x-amzn-RequestId: 0ee8951a-c679-4270-9ec4-fbcef0a114db
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css

143.204.54.16

200 OK

0 B

URL HTTP/2
images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
server: Server
date: Thu, 02 Jun 2022 06:32:01 GMT
x-amz-ir-id: 9e621114-e62a-4bd9-9060-ee1bb89073fb
expires: Wed, 28 May 2042 06:32:01 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-932 /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-932,/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
access-control-allow-origin: *
last-modified: Wed, 17 Jul 2013 22:49:32 GMT
x-nginx-cache-status: MISS
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4Pe2p_-ts1ZVpqL4oRNWKIap6NQpyj-Sh_yBKlcb8scrhCk3k4w-jQ==
age: 13110968
X-Firefox-Spdy: h2

images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js

143.204.54.16

200 OK

0 B

URL HTTP/2
images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js HTTP/1.1
Host: images-fe.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
server: Server
x-amz-ir-id: 941dc7c4-41ff-4922-87b9-ab1154a7d76c
surrogate-key: x-cache-346 /images/G/01/csminstrumentation/csm-captcha-instrumentation.min
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-346,/images/G/01/csminstrumentation/csm-captcha-instrumentation.min
access-control-allow-origin: *
last-modified: Mon, 12 Oct 2015 09:22:39 GMT
x-nginx-cache-status: HIT
content-encoding: br
date: Mon, 31 Oct 2022 11:41:31 GMT
expires: Mon, 31 Oct 2022 22:35:43 GMT
cache-control: max-age=86400,public
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dObFUb-V359OD9unKWAlo_HifdzWrTNgon46vaIHlm9bw9ZrINfJkg==
age: 71329
X-Firefox-Spdy: h2

images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js

143.204.54.16

200 OK

0 B

URL HTTP/2
images-fe.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js HTTP/1.1
Host: images-fe.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
server: Server
x-amz-ir-id: 7ee78a0b-12bc-47e4-aa94-668c10150149
surrogate-key: x-cache-653 /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-653,/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
access-control-allow-origin: *
last-modified: Fri, 20 Mar 2020 12:31:03 GMT
x-nginx-cache-status: HIT
content-encoding: gzip
date: Mon, 31 Oct 2022 10:06:02 GMT
expires: Mon, 31 Oct 2022 20:28:37 GMT
cache-control: max-age=86400,public
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Nl42wpkxerElpPRfEfbzh8KazP2aj2J_riyxPiekpszq7pAVrk74mQ==
age: 65359
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js

143.204.54.16

200 OK

0 B

URL HTTP/2
images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
server: Server
date: Sun, 31 Jul 2022 07:50:20 GMT
x-amz-ir-id: b6b48990-a843-470c-9ee5-a642a673cfa0
expires: Sat, 26 Jul 2042 07:43:36 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-699 /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-699,/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
access-control-allow-origin: *
last-modified: Wed, 26 Aug 2015 14:52:49 GMT
x-nginx-cache-status: HIT
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O2WLzvkSWy8uO-ezfJexJvhQzdS-Dj_6e64FoxJ2HsYsBeXscllC7g==
age: 8008670
X-Firefox-Spdy: h2

images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js

143.204.54.16

200 OK

0 B

URL HTTP/2
images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js
IP
143.204.54.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amazon.jpgoodbuy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/x-javascript
server: Server
date: Tue, 31 May 2022 09:57:09 GMT
x-amz-ir-id: f3ebf737-a32c-4080-84fe-bb7bb78e969b
expires: Mon, 26 May 2042 09:57:09 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-493 /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-493,/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
access-control-allow-origin: *
last-modified: Thu, 01 Oct 2015 10:17:43 GMT
x-nginx-cache-status: MISS
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6Slv-xkmaWEgQfOcP8Neg-JSlvld3H58N4VYjlhx9Jqv4-aTMx00vg==
age: 13271461
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (30)

URL HTTP/1.1

IP

ASN