{"report_id":"fe95303b-2ed9-4f6d-9438-df231c3cfc32","version":6,"status":"done","tags":["amazon","phishing"],"date":"2026-05-19T11:25:33Z","url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"title":"Amazon","dom":{"size":6515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fbc86606e9d40e08a173902fe5bc192a","sha1":"7f4b6b2b264fa73b4812fcbec9a2e1a4d8384026","sha256":"56493cb0a15e9d473b0abc1c568d906a756319e469d6eb590c649ad6f5132564","sha512":"d9d68e6424a044ccd89f252420f359d096a31ff1b06ee88a732aac92064c2378558c4ba9781a30374a1b5bfda1846f118898f31f242f9238a08a2bf5612b40f0","ssdeep":"96:nBrHN9JJoZjD3aibprxLT2v2cWv1I8bGhJyf9G2+O+O+O+t2KT:BrHJJoVac35VG2+O+O+O+t2KT","tlshash":"fdd1183064f2203702d2d351b931a72f2f96d957aa4b6a0933ac5bc5dfe3e46dd130a9","dom_hash":"domhasha25bc6d0fa71d550efdc9741fee8a87d","first_seen":"2026-05-01T09:47:47.600872Z","last_seen":"2026-06-19T17:40:33.431475Z","times_seen":18,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T11:25:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"parvin-akter.github.io","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-05-01T09:47:45.282341Z","last_seen":"2026-05-19T10:14:54.744383Z","alert_count":22,"request_count":11,"received_data":516611,"sent_data":5217,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-17T22:36:28.748469Z","alert_count":0,"request_count":2,"received_data":189580,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"parvin-akter.github.io/favicon.ico","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\netag: W/\"69fcc76c-239b\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-github-request-id: 8730:F5BD7:D50A39:D85421:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.570077,VS0,VE124\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 564070846185afe2156ef5f1898cfa7073ca7509\r\ncontent-length: 5142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9115,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"1eb970ce5a18bec7165f016df8238566","sha1":"9efd1514af80fe14db4ed28e9bc53975b9ee089c","sha256":"70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3","sha512":"21b4d800cc282ca452f7394e95d5382340ac3481a002c21da681005a44f18ea6cf43959990cd715b4657f180e0e96d6087fe724f3200e909f9fd70ebcd5511bd","ssdeep":"192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN","tlshash":"e6126d7e19e93308d8028a1539f267993d65880f9e866e6fb5ad0351cf8fe10e1637cc","first_seen":"2023-04-05T03:08:51Z","last_seen":"2026-08-09T12:53:56.380576Z","times_seen":59625,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box3.png","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box3.png HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-427e4\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A2E4:1B0DC5:D5011C:D84A9C:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:12 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.700822,VS0,VE321\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4a5779b721a189ab10f3d83d90fe713a197a5440\r\ncontent-length: 272356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":272356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit/color RGBA, non-interlaced","md5":"47648f1ddbe89c1a3cb23f8dcee6c6bd","sha1":"bfe77d5239156df6b2290429ba1b93930f90e3f6","sha256":"1600f6fe3e03a5c119a4601326078513b3aac3a89438edf968f006ecd4b2d7de","sha512":"995771d9d83adb745e7584376b1f6107b02741565931f9ed2d8c349d6d0c80cfed4e4498523bb0807deee0ed184b061d32f1cd9cec8726bd26d0e87e66ef968f","ssdeep":"6144:Tkih4bFwOO2Gwlt2oY3kAxRN7EXx1V6AE7T8EQ7mg+:IihMw1GltLY3b1g96AjEQg","tlshash":"9644230552c5631e4520fbd658fab90aeb1ff615632f4fe1bc9beac0cbb28a05414973","first_seen":"2026-05-01T09:47:47.606472Z","last_seen":"2026-06-19T17:40:33.440892Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":14802,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box6.webp","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box6.webp HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-6f02\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: F2BC:EA4B2:D5FC50:D9472F:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.703473,VS0,VE173\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 9dd4f91e9c488932f6bbf9b92d6861107ce8e307\r\ncontent-length: 28418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"09d2625530a8f5d2efd520f456ca2254","sha1":"adcd5591f552e1c74d302d5c40fd9b23fcf7876f","sha256":"c76999c48b05515139e3dd8f594c6cc27018562bcc1fb7e71c9f346a6fad40eb","sha512":"dd93612a6f9703728a24943682a24a1b7adae68268d62cf577666512f71eeb89d081674177248d192b541cc220d504140a37d1eefcd22769a3f5226cb08122f1","ssdeep":"384:O/ok2PlqQ0lrLv9I/2QPz7C7ldDhbVgve+mTDSYrYBrVANKhE0NJlQxCLa/VSkm9:Ow30HQPvCxRhbVgWJTDXYBrnZNwxXXm9","tlshash":"25d2f25b906a6eb885ac3d74a496622cb77fb9359cd4b2546f26f40d2c43df0ccd8c60","first_seen":"2026-05-01T09:47:47.615778Z","last_seen":"2026-06-19T17:40:33.442398Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":1273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box8.webp","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box8.webp HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-34b6\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: DC9E:1410FE:D7D54E:DB2073:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.707433,VS0,VE132\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6db32ac8c4725cd04cbbd34f0775f89731f812a8\r\ncontent-length: 13494\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0ee215c2df7bb768bbfff265d2a8dce","sha1":"31ec77a25007cb5c94ce76ecd1ec891782cb0eb2","sha256":"5c2117c946440fbd62599d67bab2023c9ed1e93208772f392cbfde12422130c6","sha512":"08c5867b3530a18f6113777e9dc903bad4916d6ee631aee1c596c5dcc001138d14f6af7c08c6a6a6349333d9372c1edd536d1889a2cd95a7f138c2bf5d8cfea1","ssdeep":"192:nMTs4R15chLOSncvgDT+fyUUejkhmSGBfA2mfWZlK4ZFroYS8waIOIStXoVIp3qq:n8/8aGT+XVazEKER19IS5Dp3jjt","tlshash":"3552c0ae50a37911ef36953a00e633986a9847d543eebafcca0a75cc42f530015a3f79","first_seen":"2026-05-01T09:47:47.616998Z","last_seen":"2026-06-19T17:40:33.444873Z","times_seen":18,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box1.jpg","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box1.jpg HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-3b2c\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: AE54:103A1C:D43996:D78316:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.709507,VS0,VE167\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b8205fc812586e51a33c5d6bdf612d0032d7113f\r\ncontent-length: 15148\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 379x304, components 3","md5":"a1cd2dc8466c85998a9197e02c2745f1","sha1":"782a22f03936bdbc124c1fb3c25ab41c97c9e33f","sha256":"d475af506c3fee941c71138cf583f1887b3dbf3759afa9a588996a7f9719ac87","sha512":"1e9557a3d124bc726c56b6281753b1306a980d77667d35804fc3294b07482d890e4831065aafb8a2affe86204cdbb7f8e479c5f63140b9e8406a47031baa3834","ssdeep":"384:QYPg80eILzuiJf3T1+krnkEZlo14CtL6gSqNxKZH9:Q8g7eILzlPMkbkQqB6gSQxKZH9","tlshash":"1d62bf47631c4ebe9dc5efbc7519126390a99e12174ef248b3742fee5ab09083396217","first_seen":"2024-09-05T00:56:38Z","last_seen":"2026-08-03T15:47:47.544409Z","times_seen":4810,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/7.0.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/7.0.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://parvin-akter.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 113260\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"68b75b4e-1ba6c\"\r\nlast-modified: Tue, 02 Sep 2025 21:02:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 986625\r\nexpires: Sun, 09 May 2027 11:25:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHKoMeJZaidyqmMNcmEyjy3zeS2ehzFljLYMtuVx%2B4Emhs72Iy5cbZPVaJadVvW%2FeHdHrmixW3syIdXsvwIC0w%2BqUUe1F5r1SAj4kYZQyzokVA2Og2HyKD97mNb93ofIjy%2F6T%2BcT\"}]}\r\ncf-ray: 9fe2bd541b364e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113260,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), CFF, length 113260, version 896.768","md5":"ff919779d8d0e4ad6fab6e819c120be5","sha1":"a5e7bc931d9a1539224a4b88aadeb6cf91d35ef8","sha256":"ff6d96ef6f1b29124a8daa657809d480d7278401ab16320fdb3edf0b658d6492","sha512":"605d09f13b3dc41cde56ae9a0566a6074293dbe85792edd0252b970ef0c74194856ba5c0aa64872e4927d8ceaae5c061aec601ce401f4decce3bad81754784cd","ssdeep":"3072:yydPZuvhBgEvEjLOYMpqzoX2ypHLjjRi7W:yGKhBZvQLOYMp4yprjjRN","tlshash":"13b312dab626aa9f2cbb535d5750f0d806c67a84accef110f02c821572d4b225ff95bc","first_seen":"2025-09-04T12:31:23.528067Z","last_seen":"2026-08-09T11:13:31.807266Z","times_seen":3119,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":38,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T11:25:10.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/ HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69f4242d-1a60\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4AC8:1A8CB2:DA2AAA:DD767D:6A0C4896\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189911.925439,VS0,VE141\r\nvary: Accept-Encoding\r\nx-fastly-request-id: bcf68145dfc2804dc46d94f1246bd404e682d835\r\ncontent-length: 1483\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6752,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8156d1dee67b653ada1c373d0a54a433","sha1":"d4b87e98a37965db1cffd2a2576325b341f81cd4","sha256":"949cd060d99ef834b55d9dbf2dac89807d9553375129df9e29fbb0fd345eea49","sha512":"d09b8c3461c4692bc9f21f58093586bc8100819a57883d2f0ea8911ee6a22bb829d8523678a791cad8fc8a45dbcdeb9f266473e4651b53ad1b3c41be2112ef4f","ssdeep":"96:IQ2bJJy34DEolTAYi9HQ01tPM0IRperiaAavHuHeHeHeHsKHKy:IzJyMKBCuvHuHeHeHeHvHKy","tlshash":"50d1263064c1243702b3c345aa31e76efe968157974baa0932ed6b879ff3e05dd234a5","first_seen":"2026-05-01T09:47:47.611552Z","last_seen":"2026-06-19T17:40:33.447761Z","times_seen":18,"resource_available":true,"data":null}},"time_used":1416,"timings":{"blocked":606,"dns":36,"connect":59,"send":0,"wait":200,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/7.0.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/7.0.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://parvin-akter.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 16677\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"68b75b4e-4125\"\r\nlast-modified: Tue, 02 Sep 2025 21:02:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 317262\r\nexpires: Sun, 09 May 2027 11:25:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHlKGB2kdOH8XetNtC2dLpYF%2F62JgidHMVIJlFn0GXrRJ1AZLicZ9pLcdM8hFzWlhbwWZAqFFxJoMH4kGFnjMa3GL5OpD4vDCLv%2BpLPr3XLJkeLB96Y7%2BYcY%2Fu2aOx608mbwsoD6\"}]}\r\ncf-ray: 9fe2bd51db0c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74320,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50205)","md5":"86ee6b865559e5b5fe6880f106961293","sha1":"6e43745dbc2cc775a84fc127884a106756cc374c","sha256":"f6c5904966ef29cecdbc1d8d87240ac0fd595532db6475143e0e220924c688d0","sha512":"d92c1d3c3e88355ad5fe51d365b3b69e874a86b9c37492bdfe48365c3d6bf6e1aa3e8d5c51bba373e21876561d104ad636eebd81571881dc659959b34d69deb7","ssdeep":"1536:CWM1MvMaMfM0tAX0HEbpNG2eLZy6lkQ/erkh7:6tAXkEfGc6ZWrk9","tlshash":"e1730e12ad84019bb4568d7f3895bf34a6f2eb28aad14595e4344d807ef28fd314f732","first_seen":"2025-09-04T12:31:23.516729Z","last_seen":"2026-08-09T11:13:31.716179Z","times_seen":3523,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":79,"dns":1,"connect":33,"send":0,"wait":41,"receive":277,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/style.css","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/style.css HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69f4242d-f3d\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: E02A:1A8CB2:DA2B31:DD771C:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189911.273297,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: dc382f94dfad9156944ae4c2e655e81f5df2c4aa\r\ncontent-length: 1019\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3901,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"62315ca83652d020b0be0042b756281f","sha1":"dfa28ad4f7f84e8bb123047a135b461c5be081b3","sha256":"31e9dcb58a939a593f44295abace1643940ab6638be602954682a43a099a0e7c","sha512":"7bc551526c8d158873df2775f9819b521f49f0d0fa501900e80cc657a6b81bba0d12c240503afd0064e061f096ba391844e4ce1fb5f99b882d7e5112bfa86ebb","ssdeep":"","tlshash":"5e81cbedd60510056733de943f21af5193ee9481cb02437e7bf9608ce1ca1aa7a26fd8","first_seen":"2026-05-01T09:47:47.612722Z","last_seen":"2026-06-19T17:40:33.437212Z","times_seen":18,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/amazon-logo.png","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/amazon-logo.png HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-7a3\"\r\nexpires: Tue, 19 May 2026 10:24:24 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8110:102C1:C5B406:C8C4DA:6A0C3800\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1779189912.697287,VS0,VE171\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6bb26f41d2bc6e45ddcb032ee387f6452b52b188\r\ncontent-length: 1955\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 148, 8-bit colormap, non-interlaced","md5":"20c0a30b25a0f6cdea865916aa4799da","sha1":"6de463bfc11cdb88d1158c412092933dc4888b5e","sha256":"9730bf2fe830ac54714e92f172bab0c92ff0676c9af34aaba5416b8e4b66e8bf","sha512":"69bee9c7ce3356af28f4f35cf001b89180d983b196cc4bfce1e6c898d959a4ff02e4f47082892d6d1dbc52a84f6a6268e6fe166d0b920423b32a435b50f81218","ssdeep":"","tlshash":"6a41b38fb8600d6edafc18b0153586a6fa3204b70da2ce3e52506125086743e9bed1df","first_seen":"2026-05-01T09:47:47.603185Z","last_seen":"2026-06-19T17:40:33.438515Z","times_seen":18,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/hero.jpg","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/hero.jpg HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-1c6f1\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: FCA8:1B0DC5:D500FE:D84A81:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.698821,VS0,VE216\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 49130dba6357e8e0a26ee85d946a64f3ca561263\r\ncontent-length: 116465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":116465,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x1200, components 3","md5":"a27560b8c6f266bc26ce9e5132d79bfd","sha1":"afe80ca4ab6ce893bcd265104396964ef845c579","sha256":"648807f9a5e12ab63c22a3db5a265484ac3f298f7c0b08bbc01dbefa2df36021","sha512":"d9991b43982f9ac9e031669913ecd7abb133f7a2db786651d45f727be1cfb0dae6230fad27f24590fd55ae7649830c8e76c8bc87235aa7fe2ed24dbfa9cadf81","ssdeep":"3072:Q1SCVlzfwMnWdeHo75pcE3AgBYpIgBJ8AO:Q1tT9kf7IE3ZIIsg","tlshash":"1fb3026723f05cafe9bd26320bca03095ae152eff25b706e0c55a774a11234f7e225c9","first_seen":"2026-03-31T20:56:15.772428Z","last_seen":"2026-08-02T15:41:43.373804Z","times_seen":2671,"resource_available":false,"data":null}},"time_used":8570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":8193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box4.webp","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box4.webp HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-6fea\"\r\nexpires: Tue, 19 May 2026 11:35:11 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9948:102C1:D9E931:DD34C5:6A0C4897\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779189912.700040,VS0,VE160\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5652d8855a2610685523991a3806d3b793eaf63f\r\ncontent-length: 28650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":28650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1de74e3e4a91bc7c16d0b1a38e2d1dce","sha1":"5a8fc10ac73859dd7989dc979d1236d438890e87","sha256":"6a50e645012a9d3fca80080f94570cf8edab74e3bc6084290e0ec069ea8ec9b4","sha512":"9273c94434a36c21afadc398eaafb6b876b6822785b8e3d784c01d318bf2141ba659ce816e9cfbfa6e0ff38718031bf81076295108ce28f1f57cf7cbb026e349","ssdeep":"768:sNFY3v8Gd8SP4Mmu0KauZQ/PZO5BfQvf1AiVlwJ:K+3E488mu0KzQ3ZO5dbJ","tlshash":"79d2e1498300ae9be4964797252abd7141d6f2c5caf14ce6506fbe2bd92b93241f3c83","first_seen":"2026-05-01T09:47:47.604972Z","last_seen":"2026-06-19T17:40:33.439616Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"parvin-akter.github.io/amazon.com/box7.webp","fqdn":"parvin-akter.github.io","domain":"parvin-akter.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parvin-akter.github.io/amazon.com/","date":"2026-05-19T11:25:11.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /amazon.com/box7.webp HTTP/1.1\r\nHost: parvin-akter.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://parvin-akter.github.io/amazon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 01 May 2026 03:55:25 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69f4242d-323c\"\r\nexpires: Tue, 19 May 2026 10:24:24 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: E7D8:148E:8ADE70:8D2982:6A0C37FB\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 11:25:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1779189912.705936,VS0,VE138\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 58e2b9ffc1855db6689592902e5c2378657b78eb\r\ncontent-length: 12860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 433x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d47ef33926043614793b216251c4bfcf","sha1":"4bccf3a9897d11aa140b55ccba3c0ca83eb6edaa","sha256":"26539398c290f2d01884af9e53a53efc7033dd109ef14904980d53a75f9336d7","sha512":"fc082de64db0e88c0bf2f4a2fd870e93f49ff2d0ddfffbe5662c200505faedfd3601cd637e6c99c3d83c2e0a5a785668ba699e2210fc50b15b17e60f3eadc28d","ssdeep":"384:iwqDJjJ2KibVN0dcuZpOnzuJ8F2ANZXETIv:S9diYda5zS8","tlshash":"6e42c0842a23aba7108d53d8c641e6d78e8b5e41363f5a5a4f693e0201faf9875490ff","first_seen":"2026-05-01T09:47:47.608178Z","last_seen":"2026-06-19T17:40:33.443955Z","times_seen":18,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"parvin-akter.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}