Report - piphanyx.s3-website.us-east-2.amazonaws.com/?api=oaawz-$$qvssf:klzlya:08634hi10@5@hgbylzahapjhwwz@ula?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==

Report Overview

Visited public
2024-04-25 12:13:42
Tags
phishing
Submit Tags
URL
piphanyx.s3-website.us-east-2.amazonaws.com/?api=oaawz-$$qvssf:klzlya:08634hi10@5@hgbylzahapjhwwz@ula?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==
Finishing URL
jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==
IP / ASN
52.219.104.245
#16509 AMAZON-02
Title
DELL
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
piphanyx.s3-website.us-east-2.amazonaws.com	unknown	unknown	No data	No data	806 B	24 kB	52.219.92.248
avatar-management--avatars.us-west-2.prod.public.atl-paas.net	16531	2016-12-16	2020-09-22 13:46:31	2024-04-18 03:44:21	440 B	9.2 kB	54.230.111.71
t3.gstatic.com	unknown	2008-02-11	2013-05-06 22:15:36	2024-04-24 18:23:20	936 B	2.4 kB	142.250.74.100
jolly-desert-08634ab10.5.azurestaticapps.net	unknown	unknown	No data	No data	1.1 kB	66 kB	51.124.91.155

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==	ScriptElement	63 kB	2024-08-20	2024-08-20
Pretty URL jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== IP 51.124.91.155 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 02:49 Last Seen2024-08-20 02:50 Times Seen2 Hash c5c8715942765eeec1ba7198099ec930 276ec9244127b51e584b902d15c27d74fc112900 8864902a78ed808025a8266bdd6444828400a174dd23913c3dc21361a4114c1c Loading...

	unknown	ScriptElement	3.5 kB	2024-02-12	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-12 00:24 Last Seen2024-08-20 09:52 Times Seen4 Hash 115fb4183776feb4fd830777322ddf40 06d13de72a282c6d74bc0e1eae9e08a23690ccb5 e30bab36c9b0ba0415797e8e9d2f4aa171a54e0cdb3e64616dd4d5a847acbf15 Loading...

	unknown	ScriptElement	7.1 kB	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 02:49 Last Seen2024-08-20 02:50 Times Seen2 Hash b107afe28fdbe1d9e1c0a272425a119a 754541319cd3a2a49eaef4ebe8dbe9901eff0a9f 7a6f75322cfd382f1b2a1ff235dd1e6d5ba03c46d639926889f3303767156d8e Loading...

		Size	First Seen	Last Seen
	#1 Write - 9d1f556aec806471c83449cd17d73e37	2.0 kB	2024-04-25 14:13	2024-08-20 02:50
Pretty Observations First Seen2024-04-25 14:13 Last Seen2024-08-20 02:50 Times Seen3 Hash 9d1f556aec806471c83449cd17d73e37 aa9a8ffc3d5104cc824ed6b46174a50b31e6c044 185ed621a89dbddf5a17c858c3a7cdfb39ae4e1e6c7ae83431608e9d985a8972 Loading...

	#2 Write - 88fe702bf6945212347cccd03f84931f	11 kB	2024-08-20 02:49	2024-08-20 02:50
Pretty Observations First Seen2024-08-20 02:49 Last Seen2024-08-20 02:50 Times Seen2 Hash 88fe702bf6945212347cccd03f84931f b05df13e1435845f8d981a8d5fd4f95cce3c16a2 3efa4b8ffc9c66a3ff06a9081a7aa999547df5e36babd0a5cd8171fa0af1557d Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	piphanyx.s3-website.us-east-2.amazonaws.com/	52.219.92.248		12 kB
URL piphanyx.s3-website.us-east-2.amazonaws.com/ IP 52.219.92.248:0 ASN #16509 AMAZON-02 File type HTML document, ASCII text Size 12 kB (11699 bytes) Hash f8c57b20ca41d59db60692abba7f398b 40085c4b6f8dae599e7e402dc6bbdd36605efdce b7027c3b2818115097e95dcfa2423852fdc8fcd37be40bda1bdf00bfa0928e13 HTTP Headers `GET / HTTP/1.1 Host: piphanyx.s3-website.us-east-2.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: n6cba4b3KmSfjkgGnSkrES4ar1j4ViUkc4VhtQkWFJFIpKyanze5MRSBhKH9pNEe0RS9NMbEa78= x-amz-request-id: YGHA7SM7A2H2QJ7Q Date: Thu, 25 Apr 2024 12:13:20 GMT Last-Modified: Wed, 24 Apr 2024 15:29:46 GMT ETag: "f8c57b20ca41d59db60692abba7f398b" Content-Type: text/html Server: AmazonS3 Content-Length: 11699`

	piphanyx.s3-website.us-east-2.amazonaws.com/?api=oaawz-$$qvssf:klzlya:08634hi10@5@hgbylzahapjhwwz@ula?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==	52.219.92.248		12 kB
URL piphanyx.s3-website.us-east-2.amazonaws.com/?api=oaawz-$$qvssf:klzlya:08634hi10@5@hgbylzahapjhwwz@ula?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== IP 52.219.92.248:0 ASN #16509 AMAZON-02 File type HTML document, ASCII text Size 12 kB (11699 bytes) Hash f8c57b20ca41d59db60692abba7f398b 40085c4b6f8dae599e7e402dc6bbdd36605efdce b7027c3b2818115097e95dcfa2423852fdc8fcd37be40bda1bdf00bfa0928e13 HTTP Headers `GET /?api=oaawz-$$qvssf:klzlya:08634hi10@5@hgbylzahapjhwwz@ula?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== HTTP/1.1 Host: piphanyx.s3-website.us-east-2.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: RK88P5sgTwJFkc4sqzU2vkT/17BmXqODfOxfXT1Kpfv1pavrlsdE5cxR0LSzum63CXm4+z+hmuw= x-amz-request-id: 0Q6YPS0J891WQSDG Date: Thu, 25 Apr 2024 12:13:21 GMT Last-Modified: Wed, 24 Apr 2024 15:29:46 GMT ETag: "f8c57b20ca41d59db60692abba7f398b" Content-Type: text/html Server: AmazonS3 Content-Length: 11699`

	GET avatar-management--avatars.us-west-2.prod.public.atl-paas.net/default-avatar.png	54.230.111.71	200 OK	8.7 kB
URL GET HTTP/2 avatar-management--avatars.us-west-2.prod.public.atl-paas.net/default-avatar.png IP 54.230.111.71:443 ASN #16509 AMAZON-02 Requested by https://jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== Certificate IssuerAmazon Subject.atl-paas.net FingerprintDF:94:36:6C:6F:42:B7:79:BD:F5:BB:BB:F4:DA:3B:D6:A8:25:52:5E ValidityTue, 15 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Size 8.7 kB (8652 bytes) Hash e4a71a39b2752984f4c860d622dbf4e0 88eede69d7b754ca5ece78d2db8392bcb9e0de16 6adb618d276b0caf97244ce4d7655485075b57f5d964efaadebcc87eec0e3f9a HTTP Headers `GET /default-avatar.png HTTP/1.1 Host: avatar-management--avatars.us-west-2.prod.public.atl-paas.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png content-length: 8652 last-modified: Wed, 18 May 2022 05:48:31 GMT x-amz-version-id: D4hU9WXazVupjvK79CvUzL.0ks5Z4KUX server: AmazonS3 date: Sat, 20 Apr 2024 07:45:07 GMT cache-control: max-age=604800, immutable etag: "e4a71a39b2752984f4c860d622dbf4e0" x-cache: Hit from cloudfront via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 7R0QOT9a4z6mkuIN1khprfnxqlTDUmHFiBlsfEIQxzfDRs3uGSMSdg== age: 448096 X-Firefox-Spdy: h2

	t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50	142.250.74.100		388 B
URL t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50 IP 142.250.74.100:0 ASN #15169 GOOGLE File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 388 B (388 bytes) Hash eae4cc5db81dc4f2895adde8d1de6d94 10554eb3f44e4cb2798f1448d68cf5c8e5452ac7 cd0171d04e2cc3af3320f96c78f6516e09a6757b67f417345e69ca82c24ac1b6 HTTP Headers `GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50 HTTP/1.1 Host: t3.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-type: image/png content-location: https://www.dell.com/favicon.ico content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="media-favicon" report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]} content-length: 388 date: Thu, 25 Apr 2024 12:13:21 GMT expires: Thu, 02 May 2024 12:13:21 GMT cache-control: public, max-age=604800 last-modified: Wed, 27 Mar 2024 06:48:05 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50	142.250.74.100	200 OK	388 B
URL GET HTTP/2 t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50 IP 142.250.74.100:443 ASN #15169 GOOGLE Requested by https://jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 388 B (388 bytes) Hash eae4cc5db81dc4f2895adde8d1de6d94 10554eb3f44e4cb2798f1448d68cf5c8e5452ac7 cd0171d04e2cc3af3320f96c78f6516e09a6757b67f417345e69ca82c24ac1b6 HTTP Headers `GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://dell.com&size=50 HTTP/1.1 Host: t3.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-type: image/png content-location: https://www.dell.com/favicon.ico content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="media-favicon" report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]} content-length: 388 date: Thu, 25 Apr 2024 12:13:21 GMT expires: Thu, 02 May 2024 12:13:21 GMT cache-control: public, max-age=604800 last-modified: Wed, 27 Mar 2024 06:48:05 GMT x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET jolly-desert-08634ab10.5.azurestaticapps.net/favicon.ico	51.124.91.155	404 Not Found	2.4 kB
URL GET HTTP/2 jolly-desert-08634ab10.5.azurestaticapps.net/favicon.ico IP 51.124.91.155:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== Certificate IssuerMicrosoft Corporation Subject.5.azurestaticapps.net Fingerprint1B:AD:CD:E1:C8:1D:E4:FF:DC:DE:0A:6D:0C:98:80:D8:57:87:5A:7E ValidityFri, 22 Mar 2024 02:22:08 GMT - Mon, 17 Mar 2025 02:22:08 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (2526), with no line terminators Size 2.4 kB (2400 bytes) Hash 1c59bdd4ccf9bcba7268bc14db05224d 09346105ba7d3e939fce9430912750c3f7913fac 4496052810be66834f02f23a3e075ae12993f66f996cbe5f1907702dcecd79b8 HTTP Headers GET /favicon.ico HTTP/1.1 Host: jolly-desert-08634ab10.5.azurestaticapps.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found content-type: text/html date: Thu, 25 Apr 2024 12:13:20 GMT X-Firefox-Spdy: h2`

	GET jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ==	51.124.91.155	200 OK	63 kB
URL User Request GET HTTP/2 jolly-desert-08634ab10.5.azurestaticapps.net/?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== IP 51.124.91.155:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerMicrosoft Corporation Subject.5.azurestaticapps.net Fingerprint1B:AD:CD:E1:C8:1D:E4:FF:DC:DE:0A:6D:0C:98:80:D8:57:87:5A:7E ValidityFri, 22 Mar 2024 02:22:08 GMT - Mon, 17 Mar 2025 02:22:08 GMT File type HTML document, ASCII text Size 63 kB (63039 bytes) Hash 219693d340a10efa68489fd3033da158 60fcf08148259131d3903c7f498c1d72f6d28ee0 2b08fdbddf181e5490ec5958cb361642230eda5d3f9eb9aafe3fec995047ac1b HTTP Headers GET /?pcs=bmFyZXNoX3Rha2VtYWxsYUBkZWxsLmNvbQ== HTTP/1.1 Host: jolly-desert-08634ab10.5.azurestaticapps.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://piphanyx.s3-website.us-east-2.amazonaws.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: text/html date: Thu, 25 Apr 2024 12:13:20 GMT cache-control: public, must-revalidate, max-age=30 content-encoding: br etag: "67284897" last-modified: Wed, 24 Apr 2024 13:51:07 GMT vary: Accept-Encoding strict-transport-security: max-age=10886400; includeSubDomains; preload referrer-policy: same-origin x-content-type-options: nosniff x-xss-protection: 1; mode=block x-dns-prefetch-control: off X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash