Report - r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net

Report Overview

Visited public
2025-07-15 04:34:37
Tags
Submit Tags
URL
r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
Finishing URL
r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
IP / ASN
54.217.47.60
#16509 AMAZON-02
Title
r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r4gpyucb3w.eu-west-1.awsapprunner.com	unknown	2021-03-31	2025-07-15	2025-07-15	1.1 kB	9.0 kB	54.170.228.135
logos-world.net	79300	2019-12-26	2020-05-07	2025-07-14	491 B	15 kB	104.26.2.6
docucdn-a.akamaihd.net	10361	2009-09-14	2014-04-10	2025-07-13	525 B	816 B	23.36.77.120

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-07-11	medium	r4gpyucb3w.eu-west-1.awsapprunner.com/	Generic/Spear Phishing

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net	ScriptElement	450 B	2025-07-15	2025-07-15
Pretty URL r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net IP 54.170.228.135 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-07-15 04:34 Last Seen2025-07-15 04:34 Times Seen1 Hash e03c271461a0fcfb455e750681162eb9 adc5bb25aa81e69c205ef79cdaa23bc7c516605a add9f86b2995a492657e31026b2d9b808a43e207f4c6c98ef1ba355d4e50e44f Loading...

	r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net	ScriptElement	289 B	2025-06-03	2025-07-15
Pretty URL r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net IP 54.170.228.135 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-03 06:09 Last Seen2025-07-15 04:34 Times Seen3 Hash defd0d9d7cb5a7343ea1a861c92bcf16 266dbdc76218c718c246c5c4cbc90285c74f97b8 45edbbc676632c5b3bc942fedf7f4f2322374bcdee6ff430cd3c97abd3db140b Loading...

HTTP Transactions (4)

URL IP Response Size

GET r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net

54.170.228.135

200 OK

8.5 kB

URL User Request GET
r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
IP
54.170.228.135:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.eu-west-1.awsapprunner.com
Fingerprint7B:CD:93:16:F9:DE:3D:8F:1C:F6:75:0D:DA:98:5C:22:6F:69:FE:B4
ValiditySun, 15 Dec 2024 00:00:00 GMT - Tue, 13 Jan 2026 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (2218)
Size
8.5 kB (8500 bytes)
Hash
49683b78b0a55211ee4e45c7346d8808
cd6adb5db0e250e9913ef5907332986b9f8a702e
3570ebb35d8d6d6986d0f05569eda7f2ae5c9cc3f184ddb5420185d692c58d2a

HTTP Headers

GET /?username=emrie.brown@slurpmail.net HTTP/1.1
Host: r4gpyucb3w.eu-west-1.awsapprunner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
content-length: 8500
content-type: text/html; charset=utf-8
date: Tue, 15 Jul 2025 04:34:15 GMT
server: envoy
x-envoy-upstream-service-time: 189

GET logos-world.net/wp-content/uploads/2021/08/DocuSign-Logo.png

104.26.2.6

200 OK

14 kB

URL GET
logos-world.net/wp-content/uploads/2021/08/DocuSign-Logo.png
IP
104.26.2.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectlogos-world.net
Fingerprint4C:A9:6E:63:EA:09:0E:42:C8:27:7E:A9:9B:AB:BE:5D:B0:4A:DD:7F
ValidityThu, 19 Jun 2025 09:50:57 GMT - Wed, 17 Sep 2025 10:50:54 GMT

File type
PNG image data, 3840 x 2160, 1-bit colormap, non-interlaced
Size
14 kB (13863 bytes)
Hash
2d659b25838d80662770ee4c2f8c22dd
d83c6535daa553cc46177f761aaf6c7315d80561
cbb05a221fe26e0b5b8d8bf37f0e4ba75b4c146d9766db8d9d3155dc1dc7a87a

HTTP Headers

GET /wp-content/uploads/2021/08/DocuSign-Logo.png HTTP/1.1
Host: logos-world.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r4gpyucb3w.eu-west-1.awsapprunner.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Jul 2025 04:34:15 GMT
content-type: image/png
content-length: 13863
cf-ray: 95f68bdf8c1eb500-OSL
last-modified: Wed, 25 Aug 2021 18:10:12 GMT
etag: "61268784-3627"
expires: Mon, 13 Jul 2026 08:00:23 GMT
cache-control: max-age=31968000
cf-cache-status: HIT
age: 27760
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFJMLBf2tvOtM%2BOywW8qgYMK1xXIYRm99cWv7%2FMCilxyQSZGOZQpcR6l1s4zunS9VeIDA6Z%2FWRwHtbFMe9L31EoPeBVW%2FnSjmSyUwLtQdcooSbeXN4LITNURSPgrFYO%2BWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=572&min_rtt=456&rtt_var=257&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3213&recv_bytes=1122&delivery_rate=8619047&cwnd=254&unsent_bytes=0&cid=fa3ce62deaa9ee0a&ts=45&x=0"
X-Firefox-Spdy: h2

GET docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/icon-download-app.png

23.36.77.120

200 OK

445 B

URL GET
docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/icon-download-app.png
IP
23.36.77.120:443
ASN
#20940 Akamai International B.V.

Requested by
https://r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3
ValidityTue, 18 Mar 2025 00:00:00 GMT - Wed, 18 Mar 2026 23:59:59 GMT

File type
PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Size
445 B (445 bytes)
Hash
e03518ed70845f60e54d995516fc7814
f70c7019c0989b62cc691b6cd34859d8fc506c01
6f1ae1c2d727a21e023d4c687edbd6fb7aa97be003e3b17e4e6a2505f2b2b82c

HTTP Headers

GET /olive/images/2.62.0/global-assets/email-templates/icon-download-app.png HTTP/1.1
Host: docucdn-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r4gpyucb3w.eu-west-1.awsapprunner.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "e03518ed70845f60e54d995516fc7814:1721176281.950067"
last-modified: Wed, 17 Jul 2024 00:31:21 GMT
server: AkamaiNetStorage
content-length: 445
cache-control: max-age=6814315
date: Tue, 15 Jul 2025 04:34:15 GMT
access-control-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET r4gpyucb3w.eu-west-1.awsapprunner.com/favicon.ico

54.170.228.135

404 Not Found

207 B

URL GET
r4gpyucb3w.eu-west-1.awsapprunner.com/favicon.ico
IP
54.170.228.135:443
ASN
#16509 AMAZON-02

Requested by
https://r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
Certificate
IssuerAmazon
Subject*.eu-west-1.awsapprunner.com
Fingerprint7B:CD:93:16:F9:DE:3D:8F:1C:F6:75:0D:DA:98:5C:22:6F:69:FE:B4
ValiditySun, 15 Dec 2024 00:00:00 GMT - Tue, 13 Jan 2026 23:59:59 GMT

File type
HTML document, ASCII text
Size
207 B (207 bytes)
Hash
e46c4e5e1fbc64b1bae9ebd9bcef7fcf
d767b3cb0ad66544c649e4165fc4b37e3c17e370
e9639e3c4681ce85f852fbac48e2eeee5ba51296dbfec57c200d59b76237ab80

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: r4gpyucb3w.eu-west-1.awsapprunner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r4gpyucb3w.eu-west-1.awsapprunner.com/?username=emrie.brown@slurpmail.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
content-length: 207
content-type: text/html; charset=utf-8
date: Tue, 15 Jul 2025 04:34:15 GMT
server: envoy
x-envoy-upstream-service-time: 2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers