Report - 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/

Report Overview

Submitted URL
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
IP
18.192.94.96
ASN
#16509 AMAZON-02
Submitted
2024-04-23 13:38:46
Access
public
Website Title
Amazon
Final URL
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Tags
amazon phishing
urlquery detections
Phishing - Amazon

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-22	1.1 kB	177 kB	104.17.24.14
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app	unknown	unknown	No data	No data	6.8 kB	361 kB	18.192.94.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (0)

HTTP Transactions (15)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css

104.17.24.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52282)
Size
19 kB (18938 bytes)
Hash
c325be79a5ecca85d68eb9e5b65a547a
f2a96686228994a46961657df4c9405afec8e9c2
5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50

HTTP Headers

GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 13:38:21 GMT
content-type: text/css; charset=utf-8
content-length: 18938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "660cc074-49fa"
last-modified: Wed, 03 Apr 2024 02:35:32 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1091924
expires: Sun, 13 Apr 2025 13:38:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YKwbjRmAxkHMet37KqhkvQa6nlA4kJBt%2FqUkwMboHdIAD17txpmsiam8Xy4ALdqRukAFQjsdyWlYFp38wSjkY60UE5J5q2MbywymfIEOz5PbDC1165Hz8gkxQKIp9fGOpaM4dQwk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 878e40e6a8940b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2

104.17.24.14

200 OK

156 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280
Size
156 kB (156400 bytes)
Hash
1ec0ba058c021acf7feaa18081445d63
73e7eabf7a8ae9be149a85d196c9f3f26622925b
ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f

HTTP Headers

GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 23 Apr 2024 13:38:22 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 156400
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "660cc074-262f0"
last-modified: Wed, 03 Apr 2024 02:35:32 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1686598
expires: Sun, 13 Apr 2025 13:38:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=86JAIlF1HTp%2FFXKPnGOWilsnykDW2aKI2OZcIq5XSuNoH1yY1YwcJBLH8aZnpVd550kpp3FUIOnGUuSN%2F9Om3IKGfYGVF%2Fn00l2uFpLDhx1bJdwiqYvLM0QrglY4AC0xHe4IZ48z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 878e40e7b99a0b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon.css

18.192.94.96

200 OK

4.3 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon.css
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
4.3 kB (4313 bytes)
Hash
acf37d8c47ab827f42530557c5b4dab6
75de813f58bb60e2d1d35640453de9aa404cd413
dbf0e6b0eee8091c768fbaa8eb775a677808d513bb45250861ad00ecd8e74fff

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /amazon.css HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 23 Apr 2024 13:38:21 GMT
etag: "4f2fa0531c460f57aa4c24f4998b833c-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW5JVK0ZBBQFPX37VXS3D3NC
x-robots-tag: noindex
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon_logo.png

18.192.94.96

200 OK

85 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon_logo.png
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Size
85 kB (85040 bytes)
Hash
1b81758b8d98f363ae1dbf228ca4dbc9
a4d73722eb01a9348b9344fcc456a36c9f392f7e
9070babbf89650d2afb0f12e795cccd69a6d5abaa0c7a6682ce891e6d68c2ac5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /amazon_logo.png HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "43ffa7f395da7af186281b19123e2652-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK5NCMZP8FKJZ8YJF752
x-robots-tag: noindex
content-length: 85040
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box3_image.jpg

18.192.94.96

200 OK

9.2 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box3_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 372x232, components 3
Size
9.2 kB (9217 bytes)
Hash
ff02d68c0a2abf606eb605ad14f259b4
f92ed0338ab48081cb7d52185b2c78c2c2dde651
b15a8dcdbad38282705cae52a3dd81d1323506ccfe9a5b2a3764d4fa24139581

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box3_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "e7f075bf4507c60d53f0671cfc0630e2-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK61CVZB9VXSBJTS5YGG
x-robots-tag: noindex
content-length: 9217
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box1_image.jpg

18.192.94.96

200 OK

11 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box1_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 372x232, components 3
Size
11 kB (10576 bytes)
Hash
e35985f99b9a371c34a546d51d3e6e97
c1966756eecfbc8ed3f8e026368ee05227fe92d6
62134052cff0396b3c5cd9c060143843553af0da5f917c5d74a9264043fc9b75

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box1_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "d339bf6afe8c371b5aa741804b3edd4f-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK5Z4E6Z100JKHGFDHTW
x-robots-tag: noindex
content-length: 10576
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box4_image.jpg

18.192.94.96

200 OK

11 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box4_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 392x400, components 3
Size
11 kB (11258 bytes)
Hash
d164fe77224ca4a86c5aca1095de7ea9
6419df29c429b1a12fb277662dd8275871156eee
38125858a70b589ac578fc7b15c3bcd4886b7b79a467c9d823ba4f1ad62bb2ce

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box4_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "ea2da693b8a20fb93f9adea4ec0cd605-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK6353JN3X205V1RY7YB
x-robots-tag: noindex
content-length: 11258
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box8_image.jpg

18.192.94.96

200 OK

23 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box8_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, progressive, precision 8, 758x608, components 3
Size
23 kB (22752 bytes)
Hash
f535d9bb8ceed1b4de49df0c349387c2
85fae3143813f9bc4be2764a359209ae759d1bf7
c026afaf46843864f0874b4d6fbccbb3152cb0281f98afdd4dc88250fbbc0186

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box8_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "e4642a0a86c2078490f6f5002e542f1d-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK669V17H0MZE7CNKZ79
x-robots-tag: noindex
content-length: 22752
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box6_image.jpg

18.192.94.96

200 OK

35 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box6_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 758x608, components 3
Size
35 kB (35229 bytes)
Hash
8580484850d0b5c54e03bbf66c1b5060
6ae744e6a970b96bb6d00c49983607d205df6d25
b77b487d0d7fab9f3c84027a1ac2a8664d3e43ec836204e2e7e55cefa6b2bc4c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box6_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "2f703f14d87b4f3664e03b36c8e84063-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK656BK4B482AH32GZ5Q
x-robots-tag: noindex
content-length: 35229
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box5_image.jpg

18.192.94.96

200 OK

32 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box5_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 758x608, components 3
Size
32 kB (32009 bytes)
Hash
739f23f6eb5c2a63e2f1944de74445a4
57d541c0fdc6bd80d7bc7cc889c9f55921ae1e0c
218cc9c02a16b4a18e826f4b89cce7ae1535098f3b9d950f976c0804747767d2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box5_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "db6768f0a076e01f9ebd3f51f44e66d1-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK65BAW26BRPCS41WQNE
x-robots-tag: noindex
content-length: 32009
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box2_image.jpg

18.192.94.96

200 OK

25 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box2_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3
Size
25 kB (25230 bytes)
Hash
1933456391a4a87aa87841e6eabf0ec8
7dbff25dd4d2279dae10021aa9bbcc4979ba81c2
e7da51c1bbe9e31647c1bbc9b2c63a41c60994bb369db30b00bb85aa55cc106d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box2_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "009e8b254dace84a391875c1ba2e4c80-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK61BND35D4W542GVWQ6
x-robots-tag: noindex
content-length: 25230
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box7_image.jpg

18.192.94.96

200 OK

41 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/box7_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x608, components 3
Size
41 kB (40552 bytes)
Hash
30e03f5543e0c9151fef571d6849dea3
6e34f9991c12464cec8df825a3fb528b113ef1d7
cc27babb2dc500c80ebb0204df15243529f3a940eadaf5410930d5e9e1cd8cc0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /box7_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "dd825fb013bdc48752204cdd8ac9db54-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK66GJGHS52Z2TPXTZS8
x-robots-tag: noindex
content-length: 40552
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/hero_image.jpg

18.192.94.96

200 OK

69 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/hero_image.jpg
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3000x1200, components 3
Size
69 kB (68711 bytes)
Hash
29467d4f3bf6a7d96f02cf4c32ce80ac
432e5f4121e1ab2dce9821a988296c4db0c17fcf
85e06bc4bcf17bdf5991bd16f338f789142b6db6b8cc01714659f7ce33ef1b49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /hero_image.jpg HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/amazon.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/jpeg
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "9ba7fd6fb0e23a02a2af0e79d518da0f-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK5Y9NMPW5FCNG4YHZQW
x-robots-tag: noindex
content-length: 68711
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/Amazon_icon.png

18.192.94.96

200 OK

3.3 kB

URL GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/Amazon_icon.png
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Requested by
https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3342 bytes)
Hash
70ef7282678be0da868e54301757d9bd
a8a65b1e3543eb3ad7327e02550895031967d2b5
83a5840156020172e2edcbca6405c253c647e8dfb410ca675a487d3ebdf33d8b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET /Amazon_icon.png HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-type: image/png
date: Tue, 23 Apr 2024 13:38:22 GMT
etag: "a818df8fd81d4c9a1d8a1c098790d18f-ssl"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HW5JVK5HXJS3AGRNNED3D8WC
x-robots-tag: noindex
content-length: 3342
X-Firefox-Spdy: h2

662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/

18.192.94.96

200 OK

7.3 kB

URL User Request GET HTTP/2
662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app/
IP
18.192.94.96:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subject*.netlify.app
FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B
ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7886), with no line terminators
Size
7.3 kB (7319 bytes)
Hash
313dcdc3b5efcbb6d6a94ed4e99e567b
f764df8ebc5a8b64faa7b97ef2bbefe5303cbffd
aa6262cdb4658d06b4dcc2963b270adc0a39d86ef3b91a61cc772ea56af11742

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Amazon

HTTP Headers

GET / HTTP/1.1
Host: 662369d7a81bb99aa3655188--soft-tulumba-8de07b.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
content-encoding: br
content-type: text/html; charset=UTF-8
date: Tue, 23 Apr 2024 13:38:21 GMT
etag: "e12bea029720d1813ac8ce0e6655a754-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-nf-request-id: 01HW5JVJHH6DP7BESMTX030PZG
x-robots-tag: noindex
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (0)

HTTP Transactions (15)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers