{"report_id":"ebc34c97-3e9d-4932-8c24-ae0bc61efc5f","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-09-03T14:14:15Z","url":{"schema":"http","addr":"amazonshopping6.com/","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"amazonshopping6.com/#/login","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"title":"Amazon","dom":{"size":2666,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1714)","md5":"6d8a0c534ccb3ccaaafbfe2a92f8aa4f","sha1":"fb547055e76f406d8026622ef4eec81a1034b0b1","sha256":"5987e3403c732ac407cd6a49f61eecc87ffdf764ea84da49d7e22f513863aa06","sha512":"8f735988e0b2ca3465a9eef328fca48935cc7cf12a488e762c36cac6147229707f15e31bc59c1922a5ecaf92ab769b5a25017f40c5e430fbe107c5f3dc132b3f","ssdeep":"","tlshash":"74519e5a281818331a23d9c578a0fa197996db1fc90fd6508ab703c51ff3df19c6d476","dom_hash":"domhashf6b47771a425af6fdb7ef3db21d6f277","first_seen":"2026-09-03T14:13:36.377201Z","last_seen":"2026-09-03T15:11:57.782597Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazonshopping6.com/","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T14:14:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"amazonshopping6.com","ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-03T14:13:31.62981Z","last_seen":"2026-09-03T14:13:31.62981Z","alert_count":54,"request_count":9,"received_data":610766,"sent_data":4253,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"amazonshopping6.com/assets/index-DNsejq4S.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db17a88b8ddaebebf4ccbd2361cf7ae","sha1":"1af968f2d3a3228bbc76c0284df58829b4bede15","sha256":"2fcf2aafdae6a742e53cd7e2a908f08fe3d0672cb9584b487567404131d8e562","sha512":"3001f2e3ba68e7da4fa957ea5adc0a3321c208f4fa6d7d335fb2eb459f7f57176d777d8233671ba02d5905919fd3d6fe63fd28bffd0bacfe71e9edc8ca18001c","ssdeep":"6144:UtT7eJiBmnIQ3DW/sNbT4Ym/4px9cUHMe0vbbW2Smxphzjj:UtqNFx96J3Mmxfjj","tlshash":"4d443ad1b2d5b43887bf8195906a4410f3390bc8e40a91f9f0b4ad5a36b9dd4b2ebf35","size":262107,"data":"","first_seen":"2026-07-29T04:06:47.124015Z","last_seen":"2026-09-03T15:11:57.784143Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/_plugin-vue_export-helper-CCRSHpwL.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8205f79a932125824ffc885204da978e","sha1":"d9e7b8de1e753c55cc6ab94cec2f7d3d24db94c7","sha256":"384fe3da5652d80b9dc9e54eeecf6e9ad7b8cb0889920649c87b9ffb53ecbf1a","sha512":"1cc8d8645a256c5877b70be36399a46db9dc4423e9d7460e9ca4b19c424dc16a123879eabc4b92b223681a501f58f6e61ef9e59f93011d7da4ee683b694101ac","ssdeep":"768:+/tMA9J/6NHFnFGs0X2/EKeF/t5r1Na5bv8yYoi/lAa4n7+kQMYO:Ca4J/6NC2c33rCTayyo","tlshash":"cf5308f93386b57293ee12f7407b4402f3aa289a2c0d052cf195a99f397580991fbf75","size":61979,"data":"","first_seen":"2026-07-27T12:42:47.693267Z","last_seen":"2026-09-03T15:11:57.787242Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/login-DvGegVL1.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e72a4a97863e47c5680dad89e69138c7","sha1":"4b177f0356b9549d3bd68aa6c7c208dad2f9fa82","sha256":"40605bf2e348b99290876febb723a67a338fcd67184b9fe8a505d9253b162bba","sha512":"277a574b8dd122452befb81549230d4b2e4c27c2b2deadbbe09085b11164a0424ebadd7476a348fd496cf07f76292cddbaa1fd42abf13d77d555887ccd62ffb9","ssdeep":"","tlshash":"0241745b20a0dc7d058b49c571ca15207044b473a813ddadfef44ad43ebdfe9562ab22","size":2246,"data":"","first_seen":"2026-07-29T04:06:47.127775Z","last_seen":"2026-09-03T15:11:57.789878Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/apiMessage-BzQ9qk1w.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"280c80a29667690222adcf154c3f0eb7","sha1":"5e34b7a77905ad2b2b2c4dc0789992b2cfe4ba11","sha256":"0d01c2f06fa1436a5de80e37345909530871b316b9e6346d9e0dc6a0c8794986","sha512":"4e746ab7d9d32bb39c2908076a15e360631e70a7a325f66efcff6e9d64d351c1bd8467e01aead55fe044af96a8ea7f29bfdcba595bc34cf7e719e47078166cc8","ssdeep":"","tlshash":"2e51b781270427530dc14908b93f45de3b5db878937a559da4e887c353465adc7efbc8","size":3109,"data":"","first_seen":"2026-07-29T04:06:47.11828Z","last_seen":"2026-09-03T15:11:57.792149Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/api-CmThCn1P.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c754a252973233fdc2f1d746d1c861b","sha1":"acae0f6bbf0d8a59a3eedcc6ada646aa5aeddab1","sha256":"89bb5c7da4228803d68fbbb79ad238c53a519a7e90973b4ca7196f3aeeb3abca","sha512":"d5f813543442f8022240a851e4f74b5323f6bea13de43d4323a0baa2bf7ecc1e49084022d80960653a7e4da3c0b341900def49d813ea2f61eb8351b3059a56f5","ssdeep":"768:YiF2IgTImV0zBYMvOjskTzFlAj2WbkukJ+kHC66ilS9nfoVXBB3Gpmgx:Yiw1V09ZbHkHC66yVL3Gv","tlshash":"32434dd67a95b02183de61fd402b4402f33aa9686c0d446cb160d8db3cf558a96fff7a","size":58069,"data":"","first_seen":"2026-07-29T04:06:47.116072Z","last_seen":"2026-09-03T15:11:57.790545Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazonshopping6.com/assets/index-DNsejq4S.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:44.712Z","timestamp":1788444824712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/index-DNsejq4S.js HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-3ffdb\"\r\nexpires: Fri, 04 Sep 2026 02:13:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262107,"size_decoded":93022,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63362)","md5":"3db17a88b8ddaebebf4ccbd2361cf7ae","sha1":"1af968f2d3a3228bbc76c0284df58829b4bede15","sha256":"2fcf2aafdae6a742e53cd7e2a908f08fe3d0672cb9584b487567404131d8e562","sha512":"3001f2e3ba68e7da4fa957ea5adc0a3321c208f4fa6d7d335fb2eb459f7f57176d777d8233671ba02d5905919fd3d6fe63fd28bffd0bacfe71e9edc8ca18001c","ssdeep":"6144:UtT7eJiBmnIQ3DW/sNbT4Ym/4px9cUHMe0vbbW2Smxphzjj:UtqNFx96J3Mmxfjj","tlshash":"4d443ad1b2d5b43887bf8195906a4410f3390bc8e40a91f9f0b4ad5a36b9dd4b2ebf35","first_seen":"2026-07-29T04:06:47.124015Z","last_seen":"2026-09-03T15:11:57.784143Z","times_seen":4,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/login-DvGegVL1.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:45.689Z","timestamp":1788444825689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/login-DvGegVL1.js HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-8c6\"\r\nexpires: Fri, 04 Sep 2026 02:13:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2246,"size_decoded":1552,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2246), with no line terminators","md5":"e72a4a97863e47c5680dad89e69138c7","sha1":"4b177f0356b9549d3bd68aa6c7c208dad2f9fa82","sha256":"40605bf2e348b99290876febb723a67a338fcd67184b9fe8a505d9253b162bba","sha512":"277a574b8dd122452befb81549230d4b2e4c27c2b2deadbbe09085b11164a0424ebadd7476a348fd496cf07f76292cddbaa1fd42abf13d77d555887ccd62ffb9","ssdeep":"","tlshash":"0241745b20a0dc7d058b49c571ca15207044b473a813ddadfef44ad43ebdfe9562ab22","first_seen":"2026-07-29T04:06:47.127775Z","last_seen":"2026-09-03T15:11:57.789878Z","times_seen":4,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/api-CmThCn1P.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:45.692Z","timestamp":1788444825692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/api-CmThCn1P.js HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-e2d5\"\r\nexpires: Fri, 04 Sep 2026 02:13:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58069,"size_decoded":21947,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26721)","md5":"7c754a252973233fdc2f1d746d1c861b","sha1":"acae0f6bbf0d8a59a3eedcc6ada646aa5aeddab1","sha256":"89bb5c7da4228803d68fbbb79ad238c53a519a7e90973b4ca7196f3aeeb3abca","sha512":"d5f813543442f8022240a851e4f74b5323f6bea13de43d4323a0baa2bf7ecc1e49084022d80960653a7e4da3c0b341900def49d813ea2f61eb8351b3059a56f5","ssdeep":"768:YiF2IgTImV0zBYMvOjskTzFlAj2WbkukJ+kHC66ilS9nfoVXBB3Gpmgx:Yiw1V09ZbHkHC66yVL3Gv","tlshash":"32434dd67a95b02183de61fd402b4402f33aa9686c0d446cb160d8db3cf558a96fff7a","first_seen":"2026-07-29T04:06:47.116072Z","last_seen":"2026-09-03T15:11:57.790545Z","times_seen":4,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/apiMessage-BzQ9qk1w.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:45.696Z","timestamp":1788444825696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/apiMessage-BzQ9qk1w.js HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-c25\"\r\nexpires: Fri, 04 Sep 2026 02:13:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3109,"size_decoded":1988,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2421), with no line terminators","md5":"280c80a29667690222adcf154c3f0eb7","sha1":"5e34b7a77905ad2b2b2c4dc0789992b2cfe4ba11","sha256":"0d01c2f06fa1436a5de80e37345909530871b316b9e6346d9e0dc6a0c8794986","sha512":"4e746ab7d9d32bb39c2908076a15e360631e70a7a325f66efcff6e9d64d351c1bd8467e01aead55fe044af96a8ea7f29bfdcba595bc34cf7e719e47078166cc8","ssdeep":"","tlshash":"2e51b781270427530dc14908b93f45de3b5db878937a559da4e887c353465adc7efbc8","first_seen":"2026-07-29T04:06:47.11828Z","last_seen":"2026-09-03T15:11:57.792149Z","times_seen":4,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/login-BuU2Pnxo.css","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:45.698Z","timestamp":1788444825698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/login-BuU2Pnxo.css HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-1adf\"\r\nexpires: Fri, 04 Sep 2026 02:13:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6879,"size_decoded":4075,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (6866)","md5":"f124d4e4eac18bf3f77658d7f68c89e8","sha1":"740933f135cf3adfd174674b77d8bab0055faeb5","sha256":"8b2af7442efa20d6d877938f37b89671a3d4000d984093fda9d176783af9f4a3","sha512":"158bc1a698eb4054c04f10e1f0046dee2ce92e9ede87a96e136ffdbfd081db38c8e06cdfb58cc66bbc97a6d48154f154af2b9be4d077d9564d8fb9fa0994094c","ssdeep":"96:AKrsNAmUqNi3OOSUJ8gbuIqGg2RXwZyqpCpvYMOZEfEoTOhOy1UnlKyPvdLrJU/7:fINArrHJ8gbYGg2ReU21iKy59Uz","tlshash":"f0e1c53e6a8dbe953f37c842b254b9821c0db6539610dbacf61b1c105cab863af1553a","first_seen":"2026-07-27T12:42:47.701241Z","last_seen":"2026-09-03T15:11:57.784823Z","times_seen":7,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T14:13:43.537Z","timestamp":1788444823537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 551\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\netag: \"6a68809f-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":987,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"0ec5cc0d5b68d72726c56228aa78b713","sha1":"c9628adb10ecb592cba4b0c080113d2f2d48fb7d","sha256":"b67d2f1277eb302871fb3b36664935aa8532de387a8eea42f57957bff8dc3d07","sha512":"e1989ea4d1755ee69510416075bc8883c2f5bac529da6a77788f116b57555f0c3e2a89a98de3de58aeac5dc2519caed41310e847ebcb60759095c374e8e4c2e6","ssdeep":"","tlshash":"00f0c04154a08c2a437047547ec1f4089d83f7874749de4461eba0bd1f80b978ecf8bc","first_seen":"2026-07-29T04:06:47.121805Z","last_seen":"2026-09-03T15:11:57.786507Z","times_seen":4,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":306,"connect":218,"send":0,"wait":216,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/_plugin-vue_export-helper-CCRSHpwL.js","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:44.713Z","timestamp":1788444824713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-CCRSHpwL.js HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-f21b\"\r\nexpires: Fri, 04 Sep 2026 02:13:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61979,"size_decoded":24695,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61979), with no line terminators","md5":"8205f79a932125824ffc885204da978e","sha1":"d9e7b8de1e753c55cc6ab94cec2f7d3d24db94c7","sha256":"384fe3da5652d80b9dc9e54eeecf6e9ad7b8cb0889920649c87b9ffb53ecbf1a","sha512":"1cc8d8645a256c5877b70be36399a46db9dc4423e9d7460e9ca4b19c424dc16a123879eabc4b92b223681a501f58f6e61ef9e59f93011d7da4ee683b694101ac","ssdeep":"768:+/tMA9J/6NHFnFGs0X2/EKeF/t5r1Na5bv8yYoi/lAa4n7+kQMYO:Ca4J/6NC2c33rCTayyo","tlshash":"cf5308f93386b57293ee12f7407b4402f3aa289a2c0d052cf195a99f397580991fbf75","first_seen":"2026-07-27T12:42:47.693267Z","last_seen":"2026-09-03T15:11:57.787242Z","times_seen":7,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/assets/index-B0h_foJK.css","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:44.715Z","timestamp":1788444824715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /assets/index-B0h_foJK.css HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Jul 2026 10:12:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68809f-31427\"\r\nexpires: Fri, 04 Sep 2026 02:13:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201767,"size_decoded":56386,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"4242f5889c5fb2e68f8822060a8a8584","sha1":"5b147a56c78c9064145a069cfde851ed4350d766","sha256":"e7fc948b6642a7f3cea1a7142574aa1db504367842149ad697f569f05364e552","sha512":"0871bf8a4cd9d6917ead9ac9d38bfc8b6ff21f29aa4d3927bbe5a36dc9e01f44c24c0aa2c57ebd8592618243b60bfc48c632bd0c5ee4282587113d7e248ba49b","ssdeep":"1536:FIyNBi3MFYaQj7FCwsBlDOFIxuVoxNBNlQiQy7rAqa4z5FVqJB1:fNIClDsIxuVSMg3y","tlshash":"481494a9e790917d7f27f1759b8b96dcf13cba62dd01daa4f10091680ec3bf10623626","first_seen":"2026-07-27T12:42:47.695923Z","last_seen":"2026-09-03T15:11:57.78866Z","times_seen":7,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazonshopping6.com/favicon.svg","fqdn":"amazonshopping6.com","domain":"amazonshopping6.com","tld":"com"},"ip":{"addr":"134.122.188.116","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazonshopping6.com/","date":"2026-09-03T14:13:45.935Z","timestamp":1788444825935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amazonshopping6.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 14:00:00 GMT","end":"Sat, 28 Nov 2026 13:59:59 GMT"},"fingerprint":{"sha1":"4C:10:29:89:4D:73:18:71:3C:01:0A:87:1A:EC:05:01:8C:E0:25:85","sha256":"2C:F0:83:89:39:99:D8:AE:C8:BE:32:6E:B8:38:5A:2A:6C:C9:55:39:73:84:5D:F6:B7:46:A3:28:37:E6:A6:2A"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: amazonshopping6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazonshopping6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:13:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 27 Jun 2026 07:42:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3f7ee1-2532\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9522,"size_decoded":1953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e840862161341271697daa99a40d76b","sha1":"3f5bb8f3a6a05b7ca68a62581d2dd5bc88812caf","sha256":"61bc9a161de58248288e6905425d7180f0624c2865007b97d763fdac12043a66","sha512":"695cf2d7a2ad9fd7618cfac28e4d356f000eaa9069484ad34a68afa456e12c6943f3e66a0ab35902b5221d912c45b79e179e371f7a4097c2e149b7a5fffeed9b","ssdeep":"96:8Ep9/pIZ6gzAZp9fD6ZQEIOKMXGQSQzsw+JignGFGxQGySLISTSoSWSSESiSeSEs:qII+6DImQnMStOcbloxW1","tlshash":"901253a2e6f9b46d62150174fbd394d7102f90c9ca11078fb4be3231512baa3f9bd5b8","first_seen":"2026-03-15T03:33:01.165262Z","last_seen":"2026-09-03T18:05:18.674187Z","times_seen":8978,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"amazonshopping6.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"amazonshopping6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}