| images-na.ssl-images-amazon.com/captcha/qujzzelu/Captcha_ptzkfrhdsq.jpg | 143.204.46.106 | 200 OK | 5.5 kB |
URL GET HTTP/2images-na.ssl-images-amazon.com/captcha/qujzzelu/Captcha_ptzkfrhdsq.jpg IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x70, components 1 Hash1c1a41b17878c86f26061b31748cd145 60c368f63fee8623f24eb6060d9f858ddee8b82a 16e2d5d384e3f00d7728e7317419b3c470669f6c24d9cf47e5af3b245d2a56bf
GET /captcha/qujzzelu/Captcha_ptzkfrhdsq.jpg HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5501
server: Server
x-amz-ir-id: 3b64ece0-5d7b-4849-a9dc-f2f5422c7021
last-modified: Wed, 08 Feb 2012 17:16:19 GMT
access-control-allow-origin: *
edge-cache-tag: x-cache-471,/captcha/qujzzelu/Captcha_ptzkfrhdsq
surrogate-key: x-cache-471 /captcha/qujzzelu/Captcha_ptzkfrhdsq
x-nginx-cache-status: HIT
accept-ranges: bytes
date: Fri, 03 May 2024 23:00:27 GMT
vary: Accept-Encoding
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 67259
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PilE4X5DJ--CdkHBjMtEF6C7AkqvQOo4T0mnaOW7a1SFMFVhSlIvjA==
X-Firefox-Spdy: h2
|
|
| images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png | 143.204.46.106 | 200 OK | 17 kB |
URL GET HTTP/3images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typePNG image data, 400 x 600, 8-bit colormap, non-interlaced Hash7d7a0cfb8ec9eb548c63bfd8f743181c 76cab36d1597e40654951dec1be50c289252caaa 49ff798368f6e4367d03a44af687d47609ca4608d02b1a099281f88c910cf1aa
GET /images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 16972
x-amz-cf-pop: OSL50-C1
server: Server
date: Fri, 21 Jul 2023 15:11:09 GMT
x-amz-ir-id: 6eef3435-ceab-4342-9443-c088d5a6e681
cache-control: max-age=630720000,public
last-modified: Wed, 15 May 2013 01:55:34 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-846,/images/G/01/amazonui/sprites/aui_sprite_0007-1x
expires: Sat, 04 Jul 2043 01:09:17 GMT
surrogate-key: x-cache-846 /images/G/01/amazonui/sprites/aui_sprite_0007-1x
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24892144
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-C1",cdn-hit-layer;desc="EDGE",provider;desc="cf",cdn-rid;desc="M7P_rB1x5bMM3kwVMggLSwZesdT_GHkziZryNQQ_-BNDz3S-sWVdHg==",cdn-downstream-fbl;dur=2
x-cache: Hit from cloudfront
x-amz-cf-id: M7P_rB1x5bMM3kwVMggLSwZesdT_GHkziZryNQQ_-BNDz3S-sWVdHg==
|
|
| fls-na.amazon.com/1/oc-csi/1/OP/requestId=HNCJT3RY8BDJDJE4K5EQ&js=1 | 52.3.89.137 | 200 OK | 43 B |
URL GET HTTP/2fls-na.amazon.com/1/oc-csi/1/OP/requestId=HNCJT3RY8BDJDJE4K5EQ&js=1 IP52.3.89.137:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerAmazon Subjectfls-na.amazon.com Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashe68cc604cab69bf03b8cd228d940f5ef 15c0c62c4c7c917b5dd82a8e1e439211a44b9e98 a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
GET /1/oc-csi/1/OP/requestId=HNCJT3RY8BDJDJE4K5EQ&js=1 HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 17:40:14 GMT
content-type: image/gif
content-length: 43
x-amzn-requestid: 7fc988c3-8605-421b-87b5-d1bc0d551eb1
X-Firefox-Spdy: h2
|
|
| images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css | 143.204.46.106 | 200 OK | 30 kB |
URL GET HTTP/2images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash7a254511a4b8a317a0739c9358b9520e 7d77b0fe1d747a45f17c350639e7cb113956045b dbf126444be511259a4e176d14664bd8c3d1a9b52f4b6f381b2d44869e4e42d3
GET /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: Server
date: Sun, 13 Aug 2023 06:52:09 GMT
x-amz-ir-id: 3c9c4e67-95da-41df-8807-d86cc280dae9
cache-control: max-age=630720000,public
last-modified: Wed, 17 Jul 2013 22:49:32 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-109,/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
expires: Fri, 07 Aug 2043 07:46:12 GMT
surrogate-key: x-cache-109 /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 22934884
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kl7IxPklB56V_Rc1LmtYZ0DxYSMgsi86h_PsM_FdMuNf4FMbQy0TTA==
X-Firefox-Spdy: h2
|
|
| fls-na.amazon.com/1/batch/1/OE/ | 52.3.89.137 | 204 No Content | 0 B |
URL POST HTTP/2fls-na.amazon.com/1/batch/1/OE/ IP52.3.89.137:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerAmazon Subjectfls-na.amazon.com Fingerprint30:A3:4C:70:42:BB:AA:D8:DB:94:E8:8F:1E:BB:D2:18:92:3A:B6:0E ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /1/batch/1/OE/ HTTP/1.1
Host: fls-na.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 20341
Origin: https://qwer.adkgqdqk.cloudns.biz
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 04 May 2024 17:40:15 GMT
x-amzn-requestid: 83a4d76e-3ece-4707-b800-a9b44e7ddab1
access-control-allow-origin: *
access-control-expose-headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
X-Firefox-Spdy: h2
|
|
| images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js | 143.204.46.106 | 200 OK | 1.8 kB |
URL GET HTTP/3images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1827), with no line terminators Hash747e84e823a449d0603999c8011553ca aae02cb846cac66e6df9ca9a356a7c6d7c51a65d 2bc70b2c3cfcf9e741e0bc2334bdf31803bd430a3a6425bab043047995eb2b76
GET /images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: 3841ed08-60b0-4661-9a53-fac27b8116d4
last-modified: Mon, 12 Oct 2015 09:22:39 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-609,/images/G/01/csminstrumentation/csm-captcha-instrumentation.min
surrogate-key: x-cache-609 /images/G/01/csminstrumentation/csm-captcha-instrumentation.min
x-nginx-cache-status: HIT
content-encoding: gzip
date: Sat, 04 May 2024 09:26:54 GMT
cache-control: max-age=86400,public
expires: Sat, 04 May 2024 08:45:27 GMT
vary: Accept-Encoding
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 35223
server-timing: provider;desc="cf",cdn-rid;desc="1Gv0llxcNbQZ5us5frjoqN7989dofpQyRnilHzoP2um73MdzPldmhg==",cdn-downstream-fbl;dur=2
x-amz-cf-id: 1Gv0llxcNbQZ5us5frjoqN7989dofpQyRnilHzoP2um73MdzPldmhg==
|
|
| images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js | 143.204.46.106 | 200 OK | 1.8 kB |
URL GET HTTP/3images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1885), with no line terminators Hash554e3ca56fcbef44ead95bb2185e5907 7a479411ad04fcd58410c50dc69b81b7f390ad3f 31bf624bc6233d6049e4279e1d6b166fc58f97271d9935cb6b6025d151d581fb
GET /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
x-amz-ir-id: b62d12d7-7331-40ee-b9ac-911cedf2a8f9
last-modified: Fri, 20 Mar 2020 12:31:03 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-512,/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
surrogate-key: x-cache-512 /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d
x-nginx-cache-status: HIT
content-encoding: gzip
date: Sat, 04 May 2024 08:49:41 GMT
cache-control: max-age=86400,public
expires: Wed, 25 Oct 2023 22:21:21 GMT
vary: Accept-Encoding
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 77635
server-timing: provider;desc="cf",cdn-rid;desc="vwrATNbIBwzNEnuw4NDsTJjCkuGGc-qyc4fXUdsUBm5893gEE1rMVw==",cdn-downstream-fbl;dur=2
x-amz-cf-id: vwrATNbIBwzNEnuw4NDsTJjCkuGGc-qyc4fXUdsUBm5893gEE1rMVw==
|
|
| images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js | 143.204.46.106 | 200 OK | 7.2 kB |
URL GET HTTP/3images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7409), with no line terminators Hashb95d93ebca68aad50b454b2ff4dc68b3 0a1a9aafb61571e3ddcaa4e2a5ce041d718ac07f 80ff7d435fbffd1b9a6b75e39d98e3311e8420f8f71fb4b71c31f03f507e6619
GET /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
date: Tue, 25 Jul 2023 21:16:33 GMT
x-amz-ir-id: 844186c8-ef49-4ff6-b768-c5cf8919c236
cache-control: max-age=630720000,public
last-modified: Wed, 26 Aug 2015 14:52:49 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-438,/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
expires: Tue, 14 Jul 2043 07:39:01 GMT
surrogate-key: x-cache-438 /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 24524620
server-timing: provider;desc="cf",cdn-rid;desc="sB1coyJDz2Aajj9hLn7VXB8CZrKgqQntD4onWPXdP0c201LlSMlf-A==",cdn-downstream-fbl;dur=2
x-amz-cf-id: sB1coyJDz2Aajj9hLn7VXB8CZrKgqQntD4onWPXdP0c201LlSMlf-A==
|
|
| qwer.adkgqdqk.cloudns.biz/ | 188.114.96.1 | 200 OK | 6.6 kB |
URL User Request GET HTTP/2qwer.adkgqdqk.cloudns.biz/ IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectqwer.adkgqdqk.cloudns.biz Fingerprint52:61:9F:F3:F9:3D:0D:63:4F:57:76:0A:99:DF:22:3B:64:47:F0:C2 ValiditySun, 10 Mar 2024 11:40:52 GMT - Sat, 08 Jun 2024 11:40:51 GMT
File typeHTML document, ASCII text, with very long lines (6892), with no line terminators Hashfeeb1193ae63009bfa7bb1bbc641f6d2 89e03474d5e35672b7532d7cbb7bc10e5c9930ba 9724a9245dd286cbff9db72922cc1220daee9806f8eaac76903752974fbc94c9
Analyzer | Verdict | Alert | OpenPhish | phishing | Amazon.com Inc. |
GET / HTTP/1.1
Host: qwer.adkgqdqk.cloudns.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 17:40:13 GMT
content-type: text/html
cf-ray: 87ea464bfa10712a-OSL
cf-cache-status: DYNAMIC
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dbsdBwbfRQbrrhPb-P6ybwYnuudbixn_5vNE9Hn_-fBrCQ7ZXR7GiA==
x-amz-cf-pop: OSL50-P1
x-amz-rid: HNCJT3RY8BDJDJE4K5EQ
x-cache: Miss from cloudfront
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ecAvCNIG26FIWr6PLMEGIpetBXaQX%2FjrwH7TOt7CYL%2Fcz7BSXaKrJ0sRHESySiv0h1zjVa9xPBPIe6KdAbpJiBhgNHV1gbj5Q3X1fiYOs0Wb6qmg9R5Sh18WnPPI5ZgT5%2Bi%2BKy74JO7BGz32"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| qwer.adkgqdqk.cloudns.biz/favicon.ico | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3qwer.adkgqdqk.cloudns.biz/favicon.ico IP188.114.96.1:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerLet's Encrypt Subjectqwer.adkgqdqk.cloudns.biz Fingerprint52:61:9F:F3:F9:3D:0D:63:4F:57:76:0A:99:DF:22:3B:64:47:F0:C2 ValiditySun, 10 Mar 2024 11:40:52 GMT - Sat, 08 Jun 2024 11:40:51 GMT
File typeMS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashca6619b86c2f6e6068b69ba3aaddb7e4 c44a1bb9d14385334eb851fbb0afb19d961c1ee7 17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09
Analyzer | Verdict | Alert | OpenPhish | phishing | Amazon.com Inc. |
GET /favicon.ico HTTP/1.1
Host: qwer.adkgqdqk.cloudns.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 17:40:13 GMT
content-type: image/x-icon
cf-ray: 87ea4651d8171c0e-OSL
cf-cache-status: MISS
etag: W/"4486-490c87c5a6340"
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: eyNTsFvrzFR9_80-dRdZ-nte1VbuzeeEXkxqBJrSwnxjhZtX5DhTVw==
x-amz-cf-pop: OSL50-P1
x-amz-rid: S1RF8G1PV8KP9RG392T2
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p0qWsRUQXbI0a3w7dekR5aaVcd23ILENnsjK47cRgNdlI9wmXCUgg%2Bo6jxgExsTc9S9BXU3LfbJuaO3fuFFvkqunSYqmfqo9KShnZAKe1%2BkiPv07uONLqtDaPvVoCBrx%2BSRwfHEuJhbtQ3n8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
|
|
| images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js | 143.204.46.106 | 200 OK | 20 kB |
URL GET HTTP/3images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js IP143.204.46.106:443
Requested byhttps://qwer.adkgqdqk.cloudns.biz/ CertificateIssuerDigiCert Inc Subjectimages-na.ssl-images-amazon.com Fingerprint8A:C2:7D:85:C5:D2:68:79:93:AF:D2:55:06:26:64:6F:36:95:1A:6E ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (522), with overstriking Hash64ee8d01bbfe60d6eff43818778fb34e 51171fbdd28e1a7a61e922e8f0272af8bc74d37b 877c2c2a2da0a1a6c0ad0d7ac8071046a1d726e5ab9c63509e3786b8c8ec5042
GET /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qwer.adkgqdqk.cloudns.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/x-javascript
x-amz-cf-pop: OSL50-C1
x-cache: Hit from cloudfront
server: Server
date: Tue, 01 Aug 2023 02:05:13 GMT
x-amz-ir-id: 4f24392f-1722-4ede-9302-b8a672ff834c
cache-control: max-age=630720000,public
last-modified: Thu, 01 Oct 2015 10:17:43 GMT
access-control-allow-origin: *
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-643,/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
expires: Sun, 26 Jul 2043 23:42:43 GMT
surrogate-key: x-cache-643 /images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-s
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
age: 23988900
server-timing: provider;desc="cf",cdn-rid;desc="vzjcFTHECY_hz_xSjZtACioO_etF3LZ8G5J2M-iAxzF30WZcObinKw==",cdn-downstream-fbl;dur=2
x-amz-cf-id: vzjcFTHECY_hz_xSjZtACioO_etF3LZ8G5J2M-iAxzF30WZcObinKw==
|
|