Returning 10 result(s) out of 666 in 0.091 second(s)

  • 54.240.253.157:443 (tcp/http/tls) - last seen on 2024-11-21 at 08:23:05 UTC

    • IP
      54.240.253.157
      Network
      54.240.248.0/21
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::3
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.pdx.amazon.com
      Subject Alt Name
      midway-auth.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479
      Validity Not Before
      2024-02-03T00:00:00Z
      Validity Not After
      2025-01-23T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f2843f7e7e95cdc3ca6e921f7dbdf992
      HTTP Header MD5
      68eefa17dd4fd0a88df76c569b373ab8
      HTTP Body MD5
      362bc9dbd21615cc8ff351a5a64aacff
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 08:23:05 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"ac203bd0915f9b41e9103269f71d504d"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 08:23:05 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..U1hXLSMtQ7UojFz4X69B2A.zximkrzFUKmB9_3-2OPXVNL5M-7gcpLGK1VwOnlFKu4ngUI9epa9Xb-wpXj16e5_4-QqQpyl90yFIGqe2HWRJ6Ut2op2DlZzVrL6XIZQ4AofOgZ6-A0B71jYNe6xrFV008MncyzEktIbg7NiSs46zHr-X3TPtbWgFcIa-k1gYlGoXQZww4kWHOAiG7Jaa09NxelnEDEJy-g9zD-NcVTeR5infOBO7nMcy9M9r4XvcKKIvtKvDdI3mdJ450BnhkDO.e_Acv3I_ypiXlnmWuH-d2A; path=/; expires=Fri, 22 Nov 2024 04:23:05 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-pdx4-64002.pdx4.amazon.com
      X-Request-Id: 2884d2e1-c7b1-4ef7-a9a3-8c0c9f33ac35
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1ac6
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="C9BRgqSinSsftey3pWst5COzkHdw4UgXSgEqRzLc/NOzl+gIbyUKm9xtdDNMrHFTeFJzUlDt1x+X3aHXRi4EKw==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;6RtGngB2EwkaYiBF6Y4SKCR3OQ9UlXfArQRLzIQl8KZRXP8Uy/GEudm6uMEASU6ff5baKnSZ6Mhw2MBc8NcIXg==&quot;,&quot;session_uuid&quot;:&quot;6ee9a9e25c1a30a4eb058b129349d607&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%2F\u0026client_id=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%3A443\u0026scope=openid\u0026response_type=id_token\u0026nonce=082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8\u0026sentry_handler_version=midwaygateway\u0026response_mode=query\u0026state=%2F&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="0ftxoqpWixKo7QTx52IhXHgtMP5EyWq0AFU4J5mBj0ppvMgoYdEcoms1nHUOpX3rI8zT22TF9bzdibO37XN3sg==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Matt, Alex, Eric, David, Pratik, Tyler, Stefan, Chris, Carl, Misha, Sunitha, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:23:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "a2z.com",
                  "amazon.com",
                  "cloudfront.net"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "362bc9dbd21615cc8ff351a5a64aacff",
               "bodymmh3" : -854311813,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"ac203bd0915f9b41e9103269f71d504d"
                  }
               ],
               "headermd5" : "68eefa17dd4fd0a88df76c569b373ab8",
               "headermmh3" : -757548452,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8460
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Boardman",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 08:23:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"ac203bd0915f9b41e9103269f71d504d\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 08:23:05 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..U1hXLSMtQ7UojFz4X69B2A.zximkrzFUKmB9_3-2OPXVNL5M-7gcpLGK1VwOnlFKu4ngUI9epa9Xb-wpXj16e5_4-QqQpyl90yFIGqe2HWRJ6Ut2op2DlZzVrL6XIZQ4AofOgZ6-A0B71jYNe6xrFV008MncyzEktIbg7NiSs46zHr-X3TPtbWgFcIa-k1gYlGoXQZww4kWHOAiG7Jaa09NxelnEDEJy-g9zD-NcVTeR5infOBO7nMcy9M9r4XvcKKIvtKvDdI3mdJ450BnhkDO.e_Acv3I_ypiXlnmWuH-d2A; path=/; expires=Fri, 22 Nov 2024 04:23:05 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-pdx4-64002.pdx4.amazon.com\r\nX-Request-Id: 2884d2e1-c7b1-4ef7-a9a3-8c0c9f33ac35\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1ac6\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"C9BRgqSinSsftey3pWst5COzkHdw4UgXSgEqRzLc/NOzl+gIbyUKm9xtdDNMrHFTeFJzUlDt1x+X3aHXRi4EKw==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;6RtGngB2EwkaYiBF6Y4SKCR3OQ9UlXfArQRLzIQl8KZRXP8Uy/GEudm6uMEASU6ff5baKnSZ6Mhw2MBc8NcIXg==&quot;,&quot;session_uuid&quot;:&quot;6ee9a9e25c1a30a4eb058b129349d607&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%2F\\u0026client_id=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%3A443\\u0026scope=openid\\u0026response_type=id_token\\u0026nonce=082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8\\u0026sentry_handler_version=midwaygateway\\u0026response_mode=query\\u0026state=%2F&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"0ftxoqpWixKo7QTx52IhXHgtMP5EyWq0AFU4J5mBj0ppvMgoYdEcoms1nHUOpX3rI8zT22TF9bzdibO37XN3sg==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3bakerstreet-prod-cmh.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Matt, Alex, Eric, David, Pratik, Tyler, Stefan, Chris, Carl, Misha, Sunitha, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "f2843f7e7e95cdc3ca6e921f7dbdf992",
         "datammh3" : 307877965,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "f7fe7df40e3a5396966920009d135eb7",
            "sha1" : "426271a94269fae9b22acaa48f60098bf5fa467e",
            "sha256" : "6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-2Z",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "54.240.248.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-onebox-pdx1",
            "midway-auth-pdx",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-onebox-pdx1.pdx.amazon.com",
            "midway-auth-pdx.pdx.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.pdx.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "54.240.253.157",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "06:b8:42:38:34:98:bf:da:57:fa:d1:ec:53:b1:d1:95",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::3",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "pdx.amazon.com",
            "pdx.proxy.amazon.com",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.pdx.amazon.com",
               "midway-auth-pdx.pdx.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth-onebox-pdx1.pdx.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.pdx.amazon.com"
         },
         "subnet" : "54.240.248.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-01-23T23:59:59Z",
            "notbefore" : "2024-02-03T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 54.239.22.32:443 (tcp/http/tls) - last seen on 2024-11-21 at 07:36:06 UTC

    • IP
      54.239.22.32
      Network
      54.239.16.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::2
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.iad.amazon.com
      Subject Alt Name
      midway-auth.iad.amazon.com midway-auth-iad.iad.proxy.amazon.com otp.midway-auth-lbr.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7
      Validity Not Before
      2024-08-16T00:00:00Z
      Validity Not After
      2025-07-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1bb8c1411a2a24ec74a980c0f0f1116
      HTTP Header MD5
      b895898f8fbdde3000b686b018dd0244
      HTTP Body MD5
      3a5effaad72d614200c583159c38c3cc
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 07:36:06 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"37fca65ba2a0375ad5df8937ec4a4d5e"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 07:36:06 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..pzXr0tkN68DrJ_eBuhAd2A._209YmIKF03HtcbLwaESUA3AL8_zSJAt4YcUxCwhUveb48d2kvXvDfn280o9l0U3CKkYh2FWzS6kSJPjKFwciy4bwIT59VFycYTNNoviuhVE-XHWNTTFgiewM1plxsHxaoBHJw7cevI1oxDguF5-vN4bUEZkV9126Od22U7J7WRs7i627EhYz5PVwmPonQ0ZvCwv2Bke5Io-1Gh3ZrZkY1kpXoB_mcC_FhtE9wTtHmMvNfgZKwOWbea88s6dzdgY.z7_3loe74COaLjCA1DHRNQ; path=/; expires=Fri, 22 Nov 2024 03:36:06 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-iad55-71023.iad55.amazon.com
      X-Request-Id: 51d5d0fa-5a5d-479a-8d66-5c1a9b2b1267
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      198b
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-4daab7872936f98b980b.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="d94Dj/EGGCBT6YFE02r8/4ZEJL2IvxXKALIOitG2dxsjVBX/SPZI1v/GCEb7rN0BZ5eKGQ4YdwgYdwo1C9ik4A==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;78Jwy0/I2oIsQSBypza5yfNEnTz3g6350ICiVLFplkK7SGa79jiKdIBuqXCP8Jg3EpczmHEkzzvIRabrawdFuQ==&quot;,&quot;session_uuid&quot;:&quot;5f29af8653198a10d99624daf3ed503f&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https://54.244.13.246/verify_midway?redirect_to=%252F\u0026client_id=scarf.forecasting.aws.a2z.com\u0026response_type=id_token\u0026scope=openid\u0026nonce=6798246118732134&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="pcdV7v3LAKk/PI2Eq5WUnbn1CGf/+X7CX6SC7CoGofXxTUOeRDtQX5MTBIaDU7VjWCamw3leHABHYYZT8GhyDg==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https://54.244.13.246/verify_midway?redirect_to=%252F&amp;client_id=scarf.forecasting.aws.a2z.com&amp;response_type=id_token&amp;scope=openid&amp;nonce=6798246118732134" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Matt, Chris, Stefan, Alex, Misha, Eric, David, Pratik, Sunitha, Tyler, Carl, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-256ec15b2ec41d126e2b.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:36:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "amazon.com",
                  "cloudfront.net",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "ip" : [
                  "54.244.13.246"
               ],
               "url" : [
                  "https://54.244.13.246/verify_midway?redirect_to=%252F",
                  "https://54.244.13.246/verify_midway?redirect_to=%252F&amp;client_id=scarf.forecasting.aws.a2z.com&amp;response_type=id_token&amp;scope=openid&amp;nonce=6798246118732134",
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "3a5effaad72d614200c583159c38c3cc",
               "bodymmh3" : -972904029,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"37fca65ba2a0375ad5df8937ec4a4d5e"
                  }
               ],
               "headermd5" : "b895898f8fbdde3000b686b018dd0244",
               "headermmh3" : -2066340545,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8147
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Ashburn",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 07:36:06 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"37fca65ba2a0375ad5df8937ec4a4d5e\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 07:36:06 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..pzXr0tkN68DrJ_eBuhAd2A._209YmIKF03HtcbLwaESUA3AL8_zSJAt4YcUxCwhUveb48d2kvXvDfn280o9l0U3CKkYh2FWzS6kSJPjKFwciy4bwIT59VFycYTNNoviuhVE-XHWNTTFgiewM1plxsHxaoBHJw7cevI1oxDguF5-vN4bUEZkV9126Od22U7J7WRs7i627EhYz5PVwmPonQ0ZvCwv2Bke5Io-1Gh3ZrZkY1kpXoB_mcC_FhtE9wTtHmMvNfgZKwOWbea88s6dzdgY.z7_3loe74COaLjCA1DHRNQ; path=/; expires=Fri, 22 Nov 2024 03:36:06 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-iad55-71023.iad55.amazon.com\r\nX-Request-Id: 51d5d0fa-5a5d-479a-8d66-5c1a9b2b1267\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n198b\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-4daab7872936f98b980b.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"d94Dj/EGGCBT6YFE02r8/4ZEJL2IvxXKALIOitG2dxsjVBX/SPZI1v/GCEb7rN0BZ5eKGQ4YdwgYdwo1C9ik4A==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;78Jwy0/I2oIsQSBypza5yfNEnTz3g6350ICiVLFplkK7SGa79jiKdIBuqXCP8Jg3EpczmHEkzzvIRabrawdFuQ==&quot;,&quot;session_uuid&quot;:&quot;5f29af8653198a10d99624daf3ed503f&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https://54.244.13.246/verify_midway?redirect_to=%252F\\u0026client_id=scarf.forecasting.aws.a2z.com\\u0026response_type=id_token\\u0026scope=openid\\u0026nonce=6798246118732134&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"pcdV7v3LAKk/PI2Eq5WUnbn1CGf/+X7CX6SC7CoGofXxTUOeRDtQX5MTBIaDU7VjWCamw3leHABHYYZT8GhyDg==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https://54.244.13.246/verify_midway?redirect_to=%252F&amp;client_id=scarf.forecasting.aws.a2z.com&amp;response_type=id_token&amp;scope=openid&amp;nonce=6798246118732134\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Matt, Chris, Stefan, Alex, Misha, Eric, David, Pratik, Sunitha, Tyler, Carl, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-256ec15b2ec41d126e2b.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "b1bb8c1411a2a24ec74a980c0f0f1116",
         "datammh3" : 1123038387,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0a6f29b90f485404868bf01d72395f86",
            "sha1" : "823d4ffd677d3ec7a5c53a79678b6162dcea8a1f",
            "sha256" : "634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-2011L",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "54.239.16.0/20"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-iad",
            "midway-auth-onebox-iad55",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-iad.iad.proxy.amazon.com",
            "midway-auth-onebox-iad55.iad.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.iad.amazon.com",
            "otp.midway-auth-lbr.amazon.com"
         ],
         "ip" : "54.239.22.32",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "09:13:e5:75:b7:57:57:39:2f:62:c8:a8:ba:5a:18:6a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::2",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "iad.amazon.com",
            "iad.proxy.amazon.com",
            "midway-auth-lbr.amazon.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.iad.amazon.com",
               "midway-auth-iad.iad.proxy.amazon.com",
               "otp.midway-auth-lbr.amazon.com",
               "midway-auth-onebox-iad55.iad.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.iad.amazon.com"
         },
         "subnet" : "54.239.16.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-07-24T23:59:59Z",
            "notbefore" : "2024-08-16T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.216.111:443 (tcp/http/tls) - last seen on 2024-11-21 at 07:16:07 UTC

    • IP
      52.94.216.111
      Network
      52.94.208.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::3
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.dub.amazon.com
      Subject Alt Name
      midway-auth.dub.amazon.com midway-auth-dub.dub.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b
      Validity Not Before
      2024-11-14T00:00:00Z
      Validity Not After
      2025-11-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ef84d47e490bb19197f61cd110d1e184
      HTTP Header MD5
      4e5372b1ebcc1685b15db1b73da2d663
      HTTP Body MD5
      ec26c5c7ea76969c44d04bb8148bf596
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 07:16:07 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"082d6ca46f454a639de7550ca0218fad"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 07:16:06 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..VqsN-IzBgt8tcSLVfjofBQ.tShJmdAFWs0YIpn5o-9fjqIFHwZUmnN-gZ943YuahQaeNfCB4ykyWatBk19fWnwIb1-AuB1TtfQA8HvF2hNCNeErB205T1f7vlerFiDk_ZRvBuTDyB423Ipl-z02DxiYFMUfH9Qq0wMYnL7xcZ0vdkitn6RdIf7XmR5S15TEzqeJhZMMAQoo7ac-8cZJII_fz2kcdpAz69jPpCwopba817dPzxfQky1xcx6fKTN5c0-_iGHIskBIreHYln-QioAX.DjMlleHN7T-qy5gbxoAr5g; path=/; expires=Fri, 22 Nov 2024 03:16:07 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-dub2-12011.dub2.amazon.com
      X-Request-Id: 44777520-6599-470e-a357-7cfc213c56b8
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1aa0
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="l9uRqoiQUmGoIzc9oB05bNhnDW9XcahGccg+DDssTlc9KTHcJ1CN3DIyZ75vwGQQJXpNdUJWwhBvzUimvhkKfA==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;81p7KhbyF5CiVYfgSuqYtXZ3TE1hLzd/LnR2jzBeL/1ZqNtcuTLILThE12OFN8XJi2oMV3QIXSkwcQAltWtr1g==&quot;,&quot;session_uuid&quot;:&quot;05e850f50394e43407270c7d17c9109b&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443%2F\u0026client_id=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443\u0026scope=openid\u0026sentry_handler_version=MidwayNginxModule-1.7-1\u0026response_type=id_token\u0026nonce=95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="UoTmStE28kqGx2yGL27PVAJN9aZr18Kax7XXawh5MFT4dkY8fvYt9xzWPAXgs5Io/1C1vH7wqMzZsKHBjUx0fw==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443%2F&amp;client_id=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443&amp;scope=openid&amp;sentry_handler_version=MidwayNginxModule-1.7-1&amp;response_type=id_token&amp;nonce=95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Eric, Sunitha, Misha, Matt, David, Carl, Pratik, Chris, Tyler, Stefan, Alex, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:16:07.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "cloudfront.net",
                  "amazon.com",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "ec26c5c7ea76969c44d04bb8148bf596",
               "bodymmh3" : 149653934,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"082d6ca46f454a639de7550ca0218fad"
                  }
               ],
               "headermd5" : "4e5372b1ebcc1685b15db1b73da2d663",
               "headermmh3" : -531718730,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8422
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Dublin",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "IE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 07:16:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"082d6ca46f454a639de7550ca0218fad\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 07:16:06 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..VqsN-IzBgt8tcSLVfjofBQ.tShJmdAFWs0YIpn5o-9fjqIFHwZUmnN-gZ943YuahQaeNfCB4ykyWatBk19fWnwIb1-AuB1TtfQA8HvF2hNCNeErB205T1f7vlerFiDk_ZRvBuTDyB423Ipl-z02DxiYFMUfH9Qq0wMYnL7xcZ0vdkitn6RdIf7XmR5S15TEzqeJhZMMAQoo7ac-8cZJII_fz2kcdpAz69jPpCwopba817dPzxfQky1xcx6fKTN5c0-_iGHIskBIreHYln-QioAX.DjMlleHN7T-qy5gbxoAr5g; path=/; expires=Fri, 22 Nov 2024 03:16:07 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-dub2-12011.dub2.amazon.com\r\nX-Request-Id: 44777520-6599-470e-a357-7cfc213c56b8\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1aa0\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"l9uRqoiQUmGoIzc9oB05bNhnDW9XcahGccg+DDssTlc9KTHcJ1CN3DIyZ75vwGQQJXpNdUJWwhBvzUimvhkKfA==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;81p7KhbyF5CiVYfgSuqYtXZ3TE1hLzd/LnR2jzBeL/1ZqNtcuTLILThE12OFN8XJi2oMV3QIXSkwcQAltWtr1g==&quot;,&quot;session_uuid&quot;:&quot;05e850f50394e43407270c7d17c9109b&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443%2F\\u0026client_id=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443\\u0026scope=openid\\u0026sentry_handler_version=MidwayNginxModule-1.7-1\\u0026response_type=id_token\\u0026nonce=95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"UoTmStE28kqGx2yGL27PVAJN9aZr18Kax7XXawh5MFT4dkY8fvYt9xzWPAXgs5Io/1C1vH7wqMzZsKHBjUx0fw==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443%2F&amp;client_id=https%3A%2F%2Ffrontend.pdx.gamma.mechanic.aws.a2z.com%3A443&amp;scope=openid&amp;sentry_handler_version=MidwayNginxModule-1.7-1&amp;response_type=id_token&amp;nonce=95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Eric, Sunitha, Misha, Matt, David, Carl, Pratik, Chris, Tyler, Stefan, Alex, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "ef84d47e490bb19197f61cd110d1e184",
         "datammh3" : 515519998,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "a292971a812efdf4a5ceb4208f5ca1ff",
            "sha1" : "3cef1449b25c02ac0ff4ed85ee189e79ba717a49",
            "sha256" : "4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IE",
            "countryname" : "Ireland",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "true",
            "latitude" : "53.41291",
            "location" : "53.41291,-8.24389",
            "longitude" : "-8.24389",
            "netname" : "AMAZON-DUB",
            "organization" : "Amazon Data Services Ireland Limited",
            "subnet" : "52.94.216.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-dub",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-dub.dub.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.dub.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "52.94.216.111",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "53.3379",
         "location" : "53.3379,-6.2591",
         "longitude" : "-6.2591",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "0b:b5:4c:89:4c:89:e6:ef:8e:10:81:ce:5a:a1:bf:34",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::3",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "dub.amazon.com",
            "dub.proxy.amazon.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.dub.amazon.com",
               "midway-auth-dub.dub.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.dub.amazon.com"
         },
         "subnet" : "52.94.208.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-11-03T23:59:59Z",
            "notbefore" : "2024-11-14T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.232.98:443 (tcp/http/tls) - last seen on 2024-11-21 at 06:26:16 UTC

    • IP
      52.94.232.98
      Network
      52.94.224.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2F 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::2
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.iad.amazon.com
      Subject Alt Name
      midway-auth.iad.amazon.com midway-auth-iad.iad.proxy.amazon.com otp.midway-auth-lbr.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7
      Validity Not Before
      2024-08-16T00:00:00Z
      Validity Not After
      2025-07-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d154163b063ff5abf20989361923ba11
      HTTP Header MD5
      6c1cc5869e641712a1e5040d07c63463
      HTTP Body MD5
      e9b8e95c51aa8dc9ecffbfa8618fb017
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 06:26:16 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"ee5a94ebc49cd415014e91f9aec38050"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:26:16 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..rbLPsGUJ_zXeykxfCrPijg.20JL_VBl3J45QvffRvQAa36gqA862TCegVjhKHd_UcYQaDOGY51rP57gm4gSPpjY2ctboXFBQACOv5B4GWQ-Oj_-kpEoLq-FS_HlM5HUoN02xrIixB0RaIjwVhJpZgTaBa9l-P-gQgLA_ULq9HMWe4mEc1_XbbVag8xSzQBDbdJ4RJSXkz4Q0LCOf5k29PU_a728rQ0fPEOEJXaYopPKPbIKf7tEyYKLVECWM4_p-TUDjP3EuNQI8MFcpMxHPOTY.1bIPtZ0bIDJhv8CSw4ag7w; path=/; expires=Fri, 22 Nov 2024 02:26:16 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-iad12-25024.iad12.amazon.com
      X-Request-Id: 2796de2e-cb4f-45f0-a7d4-f74aa46c9699
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1803
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-4daab7872936f98b980b.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="eRr5GKk6eZzDz6eH6b3J3oG65wjl6UBVNKm3UOPawrgX0VJZCT61+LJcXeXI/7oJHkaSGWiwCcbl5Q2DYmTHYw==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;ecytgCixF0pEIpd2nBcPdsR+I8tqddzhG57rDqxFcUYXBwbBiLXbLjWxbRS9VXyhW4JW2ucslXLK0lHdLft0nQ==&quot;,&quot;session_uuid&quot;:&quot;cfbf1c02e436f8cfc7faaf1ec61bbed0&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="mJCcqV45k1x6cLFKnxo1E84ZUV7j9FXL3OzXm08JbQj2Wzfo/j1fOAvjSyi+WEbEUeUkT26tHFgNoG1Izrdo0w==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Sunitha, Eric, Tyler, Alex, Carl, Pratik, Misha, Matt, Stefan, David, Chris, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-256ec15b2ec41d126e2b.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T06:26:16.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "amazon.com",
                  "cloudfront.net",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "e9b8e95c51aa8dc9ecffbfa8618fb017",
               "bodymmh3" : 170774175,
               "header" : [
                  {
                     "value" : "W/\"ee5a94ebc49cd415014e91f9aec38050",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "6c1cc5869e641712a1e5040d07c63463",
               "headermmh3" : 1271000850,
               "title" : "Midway Authentication Portal"
            },
            "length" : 7755
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Ashburn",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 06:26:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"ee5a94ebc49cd415014e91f9aec38050\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:26:16 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..rbLPsGUJ_zXeykxfCrPijg.20JL_VBl3J45QvffRvQAa36gqA862TCegVjhKHd_UcYQaDOGY51rP57gm4gSPpjY2ctboXFBQACOv5B4GWQ-Oj_-kpEoLq-FS_HlM5HUoN02xrIixB0RaIjwVhJpZgTaBa9l-P-gQgLA_ULq9HMWe4mEc1_XbbVag8xSzQBDbdJ4RJSXkz4Q0LCOf5k29PU_a728rQ0fPEOEJXaYopPKPbIKf7tEyYKLVECWM4_p-TUDjP3EuNQI8MFcpMxHPOTY.1bIPtZ0bIDJhv8CSw4ag7w; path=/; expires=Fri, 22 Nov 2024 02:26:16 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-iad12-25024.iad12.amazon.com\r\nX-Request-Id: 2796de2e-cb4f-45f0-a7d4-f74aa46c9699\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1803\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-4daab7872936f98b980b.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"eRr5GKk6eZzDz6eH6b3J3oG65wjl6UBVNKm3UOPawrgX0VJZCT61+LJcXeXI/7oJHkaSGWiwCcbl5Q2DYmTHYw==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;ecytgCixF0pEIpd2nBcPdsR+I8tqddzhG57rDqxFcUYXBwbBiLXbLjWxbRS9VXyhW4JW2ucslXLK0lHdLft0nQ==&quot;,&quot;session_uuid&quot;:&quot;cfbf1c02e436f8cfc7faaf1ec61bbed0&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"mJCcqV45k1x6cLFKnxo1E84ZUV7j9FXL3OzXm08JbQj2Wzfo/j1fOAvjSyi+WEbEUeUkT26tHFgNoG1Izrdo0w==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Sunitha, Eric, Tyler, Alex, Carl, Pratik, Misha, Matt, Stefan, David, Chris, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-256ec15b2ec41d126e2b.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "d154163b063ff5abf20989361923ba11",
         "datammh3" : -1007744198,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0a6f29b90f485404868bf01d72395f86",
            "sha1" : "823d4ffd677d3ec7a5c53a79678b6162dcea8a1f",
            "sha256" : "634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "52.94.224.0/20"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-iad",
            "midway-auth-onebox-iad55",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-iad.iad.proxy.amazon.com",
            "midway-auth-onebox-iad55.iad.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.iad.amazon.com",
            "otp.midway-auth-lbr.amazon.com"
         ],
         "ip" : "52.94.232.98",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "09:13:e5:75:b7:57:57:39:2f:62:c8:a8:ba:5a:18:6a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::2",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "iad.amazon.com",
            "iad.proxy.amazon.com",
            "midway-auth-lbr.amazon.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.iad.amazon.com",
               "midway-auth-iad.iad.proxy.amazon.com",
               "otp.midway-auth-lbr.amazon.com",
               "midway-auth-onebox-iad55.iad.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.iad.amazon.com"
         },
         "subnet" : "52.94.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2F",
         "validity" : {
            "notafter" : "2025-07-24T23:59:59Z",
            "notbefore" : "2024-08-16T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.224.69:443 (tcp/http/tls) - last seen on 2024-11-21 at 06:25:04 UTC

    • IP
      52.94.224.69
      Network
      52.94.224.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::3
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.iad.amazon.com
      Subject Alt Name
      midway-auth.iad.amazon.com midway-auth-iad.iad.proxy.amazon.com otp.midway-auth-lbr.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7
      Validity Not Before
      2024-08-16T00:00:00Z
      Validity Not After
      2025-07-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      04cae556094d682222345219cac30904
      HTTP Header MD5
      6fbcf33eda7d8d4885497fa4d58f072c
      HTTP Body MD5
      f4197e3abc8a0c979e641b8b6a37da5d
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 06:25:04 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"945ec7ce40deff2f072db0025fece31d"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:25:04 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..ted56OFMlM7Ke7mMc43Aig.ooVnOu0d7p-WLvmzhjVqQloKOx0SZOeORpaJc7vxZlRhe-PhqnKF5WheyrLsFRTfEcJ_0Cu7mwmUVZK-r5TXeb22R0m_djkN4EDntfKmDqYYxyLuVFpEICyEiJCzEwnCPWw86txryUhb2Q8_uMaJQHjyEQtrmPAT2CVOoXx-xkBpfKS0s3NMe9GkKtW9lKjilOihboTjUGWwrRQiQwEgmad4Sd_qoPrcfe91EWgha8i1opnZyqr967LZCsl1zXC_.qS5o64E1WeFF9apopv1d7w; path=/; expires=Fri, 22 Nov 2024 02:25:04 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-iad6-6013.iad6.amazon.com
      X-Request-Id: efbabe3c-01fb-4600-b070-a76b4b3ce814
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1a98
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-4daab7872936f98b980b.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="NcNYYeEyHwaCBw2rDO36Zieik1ikEs+TmAG2OLbTf/6DCmC061//apgtFDrNx3WHwhFpJLJ8+mpSZlHUIK73NQ==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;fbRIMyiun6JV8uDlYnbp3rfUWChW1ET275S3lgqkdiHLfXDmIsN/zk/Y+XSjXGY/UmeiVEC6cQ8l81B6nNn+6g==&quot;,&quot;session_uuid&quot;:&quot;36b1a33134452f5a47d1ace6a4b05f83&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443%2F\u0026client_id=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443\u0026scope=openid\u0026sentry_handler_version=MidwayNginxModule-1.7-1\u0026response_type=id_token\u0026nonce=d547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="Yeh0i6wS19Gw8z/zAKr3BAZ0AFlrjSZ/OQP8t4jseUnXIUxepn83varZJmLBgHjl48f6JX3jE4bzZBtbHpHxgg==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443%2F&amp;client_id=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443&amp;scope=openid&amp;sentry_handler_version=MidwayNginxModule-1.7-1&amp;response_type=id_token&amp;nonce=d547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Misha, Matt, David, Pratik, Tyler, Carl, Chris, Sunitha, Alex, Stefan, Eric, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-256ec15b2ec41d126e2b.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T06:25:04.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "amazon.com",
                  "a2z.com",
                  "cloudfront.net"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "f4197e3abc8a0c979e641b8b6a37da5d",
               "bodymmh3" : -1958882521,
               "header" : [
                  {
                     "value" : "W/\"945ec7ce40deff2f072db0025fece31d",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "6fbcf33eda7d8d4885497fa4d58f072c",
               "headermmh3" : -2040785114,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8413
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Ashburn",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 06:25:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"945ec7ce40deff2f072db0025fece31d\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:25:04 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..ted56OFMlM7Ke7mMc43Aig.ooVnOu0d7p-WLvmzhjVqQloKOx0SZOeORpaJc7vxZlRhe-PhqnKF5WheyrLsFRTfEcJ_0Cu7mwmUVZK-r5TXeb22R0m_djkN4EDntfKmDqYYxyLuVFpEICyEiJCzEwnCPWw86txryUhb2Q8_uMaJQHjyEQtrmPAT2CVOoXx-xkBpfKS0s3NMe9GkKtW9lKjilOihboTjUGWwrRQiQwEgmad4Sd_qoPrcfe91EWgha8i1opnZyqr967LZCsl1zXC_.qS5o64E1WeFF9apopv1d7w; path=/; expires=Fri, 22 Nov 2024 02:25:04 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-iad6-6013.iad6.amazon.com\r\nX-Request-Id: efbabe3c-01fb-4600-b070-a76b4b3ce814\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1a98\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-4daab7872936f98b980b.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"NcNYYeEyHwaCBw2rDO36Zieik1ikEs+TmAG2OLbTf/6DCmC061//apgtFDrNx3WHwhFpJLJ8+mpSZlHUIK73NQ==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;fbRIMyiun6JV8uDlYnbp3rfUWChW1ET275S3lgqkdiHLfXDmIsN/zk/Y+XSjXGY/UmeiVEC6cQ8l81B6nNn+6g==&quot;,&quot;session_uuid&quot;:&quot;36b1a33134452f5a47d1ace6a4b05f83&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443%2F\\u0026client_id=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443\\u0026scope=openid\\u0026sentry_handler_version=MidwayNginxModule-1.7-1\\u0026response_type=id_token\\u0026nonce=d547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"Yeh0i6wS19Gw8z/zAKr3BAZ0AFlrjSZ/OQP8t4jseUnXIUxepn83varZJmLBgHjl48f6JX3jE4bzZBtbHpHxgg==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443%2F&amp;client_id=https%3A%2F%2Fpdx.website.beta.mechanic.aws.a2z.com%3A443&amp;scope=openid&amp;sentry_handler_version=MidwayNginxModule-1.7-1&amp;response_type=id_token&amp;nonce=d547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Misha, Matt, David, Pratik, Tyler, Carl, Chris, Sunitha, Alex, Stefan, Eric, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-256ec15b2ec41d126e2b.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "04cae556094d682222345219cac30904",
         "datammh3" : 1093609396,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0a6f29b90f485404868bf01d72395f86",
            "sha1" : "823d4ffd677d3ec7a5c53a79678b6162dcea8a1f",
            "sha256" : "634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "52.94.224.0/20"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-iad",
            "midway-auth-onebox-iad55",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-iad.iad.proxy.amazon.com",
            "midway-auth-onebox-iad55.iad.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.iad.amazon.com",
            "otp.midway-auth-lbr.amazon.com"
         ],
         "ip" : "52.94.224.69",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "09:13:e5:75:b7:57:57:39:2f:62:c8:a8:ba:5a:18:6a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::3",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "iad.amazon.com",
            "iad.proxy.amazon.com",
            "midway-auth-lbr.amazon.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.iad.amazon.com",
               "midway-auth-iad.iad.proxy.amazon.com",
               "otp.midway-auth-lbr.amazon.com",
               "midway-auth-onebox-iad55.iad.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.iad.amazon.com"
         },
         "subnet" : "52.94.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-07-24T23:59:59Z",
            "notbefore" : "2024-08-16T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.224.69:443 (tcp/http/tls) - last seen on 2024-11-21 at 06:19:07 UTC

    • IP
      52.94.224.69
      Network
      52.94.224.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2F 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::2
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.iad.amazon.com
      Subject Alt Name
      midway-auth.iad.amazon.com midway-auth-iad.iad.proxy.amazon.com otp.midway-auth-lbr.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7
      Validity Not Before
      2024-08-16T00:00:00Z
      Validity Not After
      2025-07-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1065b54c05c3968c9ca422318a32c0ca
      HTTP Header MD5
      f311d22e8f64352fb0b025f1b5bfd97b
      HTTP Body MD5
      074a9b44728180fe21e17e22e400d2a4
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 06:19:07 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"8b464c0deb8434f07d2642ed0fdd3d1c"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:19:07 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..GXSfwCZNXO-any3pF53gGA.CtHhZ2mTVVMMwc-6A7Q8Ff3_wG6LEoRez3Rx1QdrgITZ7E2sT1cZYP7vRpsixgw4ZsAQm2_OUuGx9WmlnQGqpT_jSUDGVrxZwZhJTR-MIDaPWD04O34kwvlFqTSX7WNhHn3rt0qQ4GrbJEC_UhL9CUJfqxT7ftzEGzxyqtZxLGCkMlU1QyvUzf-M9ScagP4GMiUjlQ8IEmxK9UNpHi3go8s857QA0CTS65TfbXTNUO98roeFNAGs0tXJI5ztT_Gf.HvFwmNhTm9BxCPQL6zJHvA; path=/; expires=Fri, 22 Nov 2024 02:19:07 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-iad6-6012.iad6.amazon.com
      X-Request-Id: d7d46b8c-3fca-43b7-b132-14683aeb1ec8
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1803
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-4daab7872936f98b980b.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="pEGujso4doYc5jC2hCJL20kUZ5Edsn2A0t9RR/mRZkxcwI82VcRbWe1qDE26XQKxaOxBvWQYSz7IgP114pWs3A==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;zGWL69RcBvw03ht25mqC6IIGtxnM3cldNNxztf/z1vI05KpTS6ArI8VSJ43YFcuCo/6RNbV3/+Mug9+H5PccYg==&quot;,&quot;session_uuid&quot;:&quot;b507a1481c36dced96a9a823518e34c3&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="1wF94WwMYfIVKccbD3r0ooCD7+CsMsK5+AFBgR02E0AvgFxZ8/BMLeSl++AxBb3IoXvJzNWY9AfiXu2zBjLZ0A==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Pratik, Eric, Matt, Stefan, Sunitha, David, Misha, Alex, Chris, Tyler, Carl, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-256ec15b2ec41d126e2b.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T06:19:07.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "amazon.com",
                  "cloudfront.net",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "074a9b44728180fe21e17e22e400d2a4",
               "bodymmh3" : 1830805139,
               "header" : [
                  {
                     "value" : "W/\"8b464c0deb8434f07d2642ed0fdd3d1c",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "f311d22e8f64352fb0b025f1b5bfd97b",
               "headermmh3" : 1125170000,
               "title" : "Midway Authentication Portal"
            },
            "length" : 7752
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Ashburn",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 06:19:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"8b464c0deb8434f07d2642ed0fdd3d1c\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 06:19:07 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..GXSfwCZNXO-any3pF53gGA.CtHhZ2mTVVMMwc-6A7Q8Ff3_wG6LEoRez3Rx1QdrgITZ7E2sT1cZYP7vRpsixgw4ZsAQm2_OUuGx9WmlnQGqpT_jSUDGVrxZwZhJTR-MIDaPWD04O34kwvlFqTSX7WNhHn3rt0qQ4GrbJEC_UhL9CUJfqxT7ftzEGzxyqtZxLGCkMlU1QyvUzf-M9ScagP4GMiUjlQ8IEmxK9UNpHi3go8s857QA0CTS65TfbXTNUO98roeFNAGs0tXJI5ztT_Gf.HvFwmNhTm9BxCPQL6zJHvA; path=/; expires=Fri, 22 Nov 2024 02:19:07 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-iad6-6012.iad6.amazon.com\r\nX-Request-Id: d7d46b8c-3fca-43b7-b132-14683aeb1ec8\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1803\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-4daab7872936f98b980b.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"pEGujso4doYc5jC2hCJL20kUZ5Edsn2A0t9RR/mRZkxcwI82VcRbWe1qDE26XQKxaOxBvWQYSz7IgP114pWs3A==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;zGWL69RcBvw03ht25mqC6IIGtxnM3cldNNxztf/z1vI05KpTS6ArI8VSJ43YFcuCo/6RNbV3/+Mug9+H5PccYg==&quot;,&quot;session_uuid&quot;:&quot;b507a1481c36dced96a9a823518e34c3&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"1wF94WwMYfIVKccbD3r0ooCD7+CsMsK5+AFBgR02E0AvgFxZ8/BMLeSl++AxBb3IoXvJzNWY9AfiXu2zBjLZ0A==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Pratik, Eric, Matt, Stefan, Sunitha, David, Misha, Alex, Chris, Tyler, Carl, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-256ec15b2ec41d126e2b.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "1065b54c05c3968c9ca422318a32c0ca",
         "datammh3" : -2068687312,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0a6f29b90f485404868bf01d72395f86",
            "sha1" : "823d4ffd677d3ec7a5c53a79678b6162dcea8a1f",
            "sha256" : "634e053071a627295b1980b69eec6219342a0cb60234e4330726bfce4a51e5b7"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "52.94.224.0/20"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-iad",
            "midway-auth-onebox-iad55",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-iad.iad.proxy.amazon.com",
            "midway-auth-onebox-iad55.iad.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.iad.amazon.com",
            "otp.midway-auth-lbr.amazon.com"
         ],
         "ip" : "52.94.224.69",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "09:13:e5:75:b7:57:57:39:2f:62:c8:a8:ba:5a:18:6a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::2",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "iad.amazon.com",
            "iad.proxy.amazon.com",
            "midway-auth-lbr.amazon.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.iad.amazon.com",
               "midway-auth-iad.iad.proxy.amazon.com",
               "otp.midway-auth-lbr.amazon.com",
               "midway-auth-onebox-iad55.iad.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.iad.amazon.com"
         },
         "subnet" : "52.94.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2F",
         "validity" : {
            "notafter" : "2025-07-24T23:59:59Z",
            "notbefore" : "2024-08-16T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 54.240.253.157:443 (tcp/http/tls) - last seen on 2024-11-21 at 05:48:04 UTC

    • IP
      54.240.253.157
      Network
      54.240.248.0/21
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::2
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.pdx.amazon.com
      Subject Alt Name
      midway-auth.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479
      Validity Not Before
      2024-02-03T00:00:00Z
      Validity Not After
      2025-01-23T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d37392c882a33ebaa8fd461e5a8c09d2
      HTTP Header MD5
      312441ea709400522d3ad22d3a975a4b
      HTTP Body MD5
      646ec9f2cb5216cb42a60fcd2a27f511
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 05:48:04 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"54a48e14d8f42b07f1dc242bff6e5042"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 05:48:04 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..80degy9X7qUGoFyjP1CXzw.bQNFN2yQlkLnjhb52DLfYoTNzVcXYQ2vnxbFmKIj7tu2Mi7PWMQB_DAjYVpGR_JF-J_4KHgcxX3wuOyub2uxy53jLSwvcS1S3ea9YjJ56LE0zlqmg-P7X5MhAvba_iXoSrwieEgcnhN6I-Cixt1OCI0OllLrJag7_YVUDU4bsLCHWTgsITh1h6vrY-7JuYdtgMuGHmy2m0BPacgTnN1dtkJhCuoW0TmzyGiMmir2lH1HDnRm5Q_LvQBFQ0DyKAgM.VEkAXJhBgLFHEAC2VdoksQ; path=/; expires=Fri, 22 Nov 2024 01:48:04 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-pdx4-64006.pdx4.amazon.com
      X-Request-Id: a73dcccd-fc80-464f-9fc2-2a6d8ab49fef
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1b0c
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="mCUl0TQMIk9MTbD2b7YWL8RIzCJh4B3pbXfonQ/57JshrKibJyrcAmgpiUE6F24XnKv9ZvLKvcTXg1wVVt4jWA==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;W4aW0K/T/pQNSpVU0oEN4cO2Oa8HfNSbOrSkIQ066ULiDxuavPUA2SkurOOHIHXZm1UI65RWdLaAQBCpVB0mgQ==&quot;,&quot;session_uuid&quot;:&quot;597f373b0e977f2bdbda6857a6be5e2b&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com\u0026client_id=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com%3A443\u0026scope=openid\u0026response_type=id_token\u0026nonce=66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080\u0026response_mode=query\u0026state=eyJwYXRoIjoiLyJ9\u0026sentry_handler_version=interceptor-core-1.x&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="49tZCASXUz6aGD62CgWcOzOJzglLwBsHwfXB+LAh8JFaUtRCF7Gtc758BwFfpOQDa2r/Tdjquyp7AXVw6QY/Ug==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com&amp;client_id=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080&amp;response_mode=query&amp;state=eyJwYXRoIjoiLyJ9&amp;sentry_handler_version=interceptor-core-1.x" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Pratik, Eric, Chris, Tyler, David, Alex, Sunitha, Stefan, Carl, Misha, Matt, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:48:04.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "amazon.com",
                  "cloudfront.net",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "646ec9f2cb5216cb42a60fcd2a27f511",
               "bodymmh3" : -758077730,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"54a48e14d8f42b07f1dc242bff6e5042"
                  }
               ],
               "headermd5" : "312441ea709400522d3ad22d3a975a4b",
               "headermmh3" : 1101983157,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8530
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Boardman",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 05:48:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"54a48e14d8f42b07f1dc242bff6e5042\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 05:48:04 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..80degy9X7qUGoFyjP1CXzw.bQNFN2yQlkLnjhb52DLfYoTNzVcXYQ2vnxbFmKIj7tu2Mi7PWMQB_DAjYVpGR_JF-J_4KHgcxX3wuOyub2uxy53jLSwvcS1S3ea9YjJ56LE0zlqmg-P7X5MhAvba_iXoSrwieEgcnhN6I-Cixt1OCI0OllLrJag7_YVUDU4bsLCHWTgsITh1h6vrY-7JuYdtgMuGHmy2m0BPacgTnN1dtkJhCuoW0TmzyGiMmir2lH1HDnRm5Q_LvQBFQ0DyKAgM.VEkAXJhBgLFHEAC2VdoksQ; path=/; expires=Fri, 22 Nov 2024 01:48:04 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-pdx4-64006.pdx4.amazon.com\r\nX-Request-Id: a73dcccd-fc80-464f-9fc2-2a6d8ab49fef\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1b0c\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"mCUl0TQMIk9MTbD2b7YWL8RIzCJh4B3pbXfonQ/57JshrKibJyrcAmgpiUE6F24XnKv9ZvLKvcTXg1wVVt4jWA==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;W4aW0K/T/pQNSpVU0oEN4cO2Oa8HfNSbOrSkIQ066ULiDxuavPUA2SkurOOHIHXZm1UI65RWdLaAQBCpVB0mgQ==&quot;,&quot;session_uuid&quot;:&quot;597f373b0e977f2bdbda6857a6be5e2b&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com\\u0026client_id=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com%3A443\\u0026scope=openid\\u0026response_type=id_token\\u0026nonce=66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080\\u0026response_mode=query\\u0026state=eyJwYXRoIjoiLyJ9\\u0026sentry_handler_version=interceptor-core-1.x&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"49tZCASXUz6aGD62CgWcOzOJzglLwBsHwfXB+LAh8JFaUtRCF7Gtc758BwFfpOQDa2r/Tdjquyp7AXVw6QY/Ug==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com&amp;client_id=https%3A%2F%2Fromiking.us-east-1.sso.operatornet.aws.a2z.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080&amp;response_mode=query&amp;state=eyJwYXRoIjoiLyJ9&amp;sentry_handler_version=interceptor-core-1.x\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Pratik, Eric, Chris, Tyler, David, Alex, Sunitha, Stefan, Carl, Misha, Matt, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "d37392c882a33ebaa8fd461e5a8c09d2",
         "datammh3" : -66803278,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "f7fe7df40e3a5396966920009d135eb7",
            "sha1" : "426271a94269fae9b22acaa48f60098bf5fa467e",
            "sha256" : "6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-2Z",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "54.240.248.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-onebox-pdx1",
            "midway-auth-pdx",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-onebox-pdx1.pdx.amazon.com",
            "midway-auth-pdx.pdx.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.pdx.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "54.240.253.157",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "06:b8:42:38:34:98:bf:da:57:fa:d1:ec:53:b1:d1:95",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::2",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "pdx.amazon.com",
            "pdx.proxy.amazon.com",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.pdx.amazon.com",
               "midway-auth-pdx.pdx.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth-onebox-pdx1.pdx.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.pdx.amazon.com"
         },
         "subnet" : "54.240.248.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-01-23T23:59:59Z",
            "notbefore" : "2024-02-03T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.216.111:443 (tcp/http/tls) - last seen on 2024-11-21 at 04:45:08 UTC

    • IP
      52.94.216.111
      Network
      52.94.208.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect::1
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.dub.amazon.com
      Subject Alt Name
      midway-auth.dub.amazon.com midway-auth-dub.dub.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b
      Validity Not Before
      2024-11-14T00:00:00Z
      Validity Not After
      2025-11-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4dbdc501ebb51f61dfdd748562bdf054
      HTTP Header MD5
      410bf8934965054eada2781b6ab80581
      HTTP Body MD5
      dff78975ff43fa7c525031c38173d0c5
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 04:45:08 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"dcbe06f63071db4224532a15237e1d64"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:45:08 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..z0ie1r9kb9TFsO3y7dSAfg.ysZg_ReKVY2ZvmxJ0lCkqKgdm6rSgUM6h_iCRaigdAY3pEmsydJUdX62vU1LIGDheLoOIkrtA2aYpBj7OQIqKZnzV0YCxv4iFIpTokxKDamBt0wKbnLMkuBCXuJ7rVs1-v0SIR1VHWtWtvAXkjc-JI1iEDgAXvIX_M6GkepkK91-lL-BP_l5pfH-mAmoXv2hjc3D3XrOestIuVqGMEF9sNd4L4eS8BziVW5GFRDamHnxqO1b3OhIjKSE7c42PoLn.WuMbzW7z8ctnpx2FIrEc9g; path=/; expires=Fri, 22 Nov 2024 00:45:08 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-dub2-12008.dub2.amazon.com
      X-Request-Id: 64c6eb4c-0f30-4844-8b89-caebb99beea8
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1ac6
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="cnVixaZSFoxD6Q1QaxvYxAWcdu4f+D5vC+suqT1ClNZAc/y4TytcBdoMjmDKjpfKo30Z4ptrSC+0gj3h+OsVwA==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;ri1evOV4PiX1KxvS76+dR2R13QhfuXont8F6ImV3cB2cK8DBDAF0rGzOmOJOOtJJwpSyBNsqDGcIqGlqoN7xCw==&quot;,&quot;session_uuid&quot;:&quot;c5228b0e9bec7d582d2058ea55da7074&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%2F\u0026client_id=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%3A443\u0026scope=openid\u0026response_type=id_token\u0026nonce=760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea\u0026sentry_handler_version=midwaygateway\u0026response_mode=query\u0026state=%2F&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="aMzLKeLmjGZ5nFkbWIR3UjKFAeBqvIOvBQPD8cggyJNaylVUC5/G7+B52iv5EThclGRu7O4v9e+6atC5DYlJhQ==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Eric, Tyler, Pratik, Carl, David, Sunitha, Misha, Chris, Stefan, Matt, Alex, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T04:45:08.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "a2z.com",
                  "cloudfront.net",
                  "amazon.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "dff78975ff43fa7c525031c38173d0c5",
               "bodymmh3" : 1365735164,
               "header" : [
                  {
                     "value" : "W/\"dcbe06f63071db4224532a15237e1d64",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "410bf8934965054eada2781b6ab80581",
               "headermmh3" : 871163,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8460
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Dublin",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "IE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 04:45:08 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"dcbe06f63071db4224532a15237e1d64\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:45:08 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..z0ie1r9kb9TFsO3y7dSAfg.ysZg_ReKVY2ZvmxJ0lCkqKgdm6rSgUM6h_iCRaigdAY3pEmsydJUdX62vU1LIGDheLoOIkrtA2aYpBj7OQIqKZnzV0YCxv4iFIpTokxKDamBt0wKbnLMkuBCXuJ7rVs1-v0SIR1VHWtWtvAXkjc-JI1iEDgAXvIX_M6GkepkK91-lL-BP_l5pfH-mAmoXv2hjc3D3XrOestIuVqGMEF9sNd4L4eS8BziVW5GFRDamHnxqO1b3OhIjKSE7c42PoLn.WuMbzW7z8ctnpx2FIrEc9g; path=/; expires=Fri, 22 Nov 2024 00:45:08 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-dub2-12008.dub2.amazon.com\r\nX-Request-Id: 64c6eb4c-0f30-4844-8b89-caebb99beea8\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1ac6\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"cnVixaZSFoxD6Q1QaxvYxAWcdu4f+D5vC+suqT1ClNZAc/y4TytcBdoMjmDKjpfKo30Z4ptrSC+0gj3h+OsVwA==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;ri1evOV4PiX1KxvS76+dR2R13QhfuXont8F6ImV3cB2cK8DBDAF0rGzOmOJOOtJJwpSyBNsqDGcIqGlqoN7xCw==&quot;,&quot;session_uuid&quot;:&quot;c5228b0e9bec7d582d2058ea55da7074&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%2F\\u0026client_id=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%3A443\\u0026scope=openid\\u0026response_type=id_token\\u0026nonce=760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea\\u0026sentry_handler_version=midwaygateway\\u0026response_mode=query\\u0026state=%2F&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"aMzLKeLmjGZ5nFkbWIR3UjKFAeBqvIOvBQPD8cggyJNaylVUC5/G7+B52iv5EThclGRu7O4v9e+6atC5DYlJhQ==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3-throttleco-prod-mdw.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Eric, Tyler, Pratik, Carl, David, Sunitha, Misha, Chris, Stefan, Matt, Alex, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "4dbdc501ebb51f61dfdd748562bdf054",
         "datammh3" : 1646102789,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "a292971a812efdf4a5ceb4208f5ca1ff",
            "sha1" : "3cef1449b25c02ac0ff4ed85ee189e79ba717a49",
            "sha256" : "4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IE",
            "countryname" : "Ireland",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "true",
            "latitude" : "53.41291",
            "location" : "53.41291,-8.24389",
            "longitude" : "-8.24389",
            "netname" : "AMAZON-DUB",
            "organization" : "Amazon Data Services Ireland Limited",
            "subnet" : "52.94.216.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-dub",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-dub.dub.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.dub.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "52.94.216.111",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "53.3379",
         "location" : "53.3379,-6.2591",
         "longitude" : "-6.2591",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "0b:b5:4c:89:4c:89:e6:ef:8e:10:81:ce:5a:a1:bf:34",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect::1",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "dub.amazon.com",
            "dub.proxy.amazon.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.dub.amazon.com",
               "midway-auth-dub.dub.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.dub.amazon.com"
         },
         "subnet" : "52.94.208.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-11-03T23:59:59Z",
            "notbefore" : "2024-11-14T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.208.118:443 (tcp/http/tls) - last seen on 2024-11-21 at 04:29:04 UTC

    • IP
      52.94.208.118
      Network
      52.94.208.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::3
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.pdx.amazon.com
      Subject Alt Name
      midway-auth.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479
      Validity Not Before
      2024-02-03T00:00:00Z
      Validity Not After
      2025-01-23T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6fafebb71e465c9845222869def0f264
      HTTP Header MD5
      01c6222c923fff65bfd399f6b9b95891
      HTTP Body MD5
      a1b8b47cb53d6e8d43d512c12f58bdad
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 04:29:04 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"e7d73c2c4ad6328a03316f681169e1e4"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:29:04 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..n-6Wn8AyK2Hin8Ha61YzdQ.B64K7AV1CPO-tSuD_VtUhXIWOF_UBRUjzQsGpLyqGagNTnJVgqfa7j32JuwRZ8pD3rksMtb0GQDGNZUV8REnh3gcMYhV43Xi6rRqWIfNMlgJUEr5Mqe_W9X_Nyb8nnY8Zk0o4Q01DiLS8aBfyrqsQgewuVKb6rRkNUJlJf28UFnsVLzXKRmjTh7Q5DPLtwecCqWPPkzILK1bued4g9TxcX4NndVZk9EF6ln_AMdDlizrxFC2qt-tOfdnkl5ElcdC.mqwFvS8NsiqQ5hnhP3RF0Q; path=/; expires=Fri, 22 Nov 2024 00:29:04 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-pdx1-60015.pdx1.amazon.com
      X-Request-Id: 5b8a2ac7-c4b4-4b73-8a63-2caa1ac118c9
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1ac6
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="MnSHJWY2aaMjLLzWVF7cVrF1a2IgV41hMvHtxa6YbTZeHzqk44487pCl7wdofan26NwA3qHjcgWCj+HmnR6KRA==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;XNSbhgkC8t7KtnXl+zlWtKWCo48xcPELY4VyzagkjzEwvyYHjLqnk3k/JjTHGiMU/CvIM7DEDm/T+37um6JoQw==&quot;,&quot;session_uuid&quot;:&quot;2aeb7a12c600db8aba33cc0ba23af90f&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%2F\u0026client_id=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%3A443\u0026scope=openid\u0026response_type=id_token\u0026nonce=9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b\u0026sentry_handler_version=midwaygateway\u0026response_mode=query\u0026state=%2F&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="xiJcagMwop/qGZniR1HCRw7JN0N7IENyu4EPQqUy4wmqSeHrhoj30lmQyjN7crfnV2Bc//qUvBYL/wNhlrQEew==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Eric, Sunitha, Chris, David, Alex, Carl, Misha, Matt, Tyler, Pratik, Stefan, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T04:29:04.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "cloudfront.net",
                  "amazon.com",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "a1b8b47cb53d6e8d43d512c12f58bdad",
               "bodymmh3" : 684275934,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"e7d73c2c4ad6328a03316f681169e1e4"
                  }
               ],
               "headermd5" : "01c6222c923fff65bfd399f6b9b95891",
               "headermmh3" : 1131194620,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8460
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Boardman",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 04:29:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"e7d73c2c4ad6328a03316f681169e1e4\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:29:04 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..n-6Wn8AyK2Hin8Ha61YzdQ.B64K7AV1CPO-tSuD_VtUhXIWOF_UBRUjzQsGpLyqGagNTnJVgqfa7j32JuwRZ8pD3rksMtb0GQDGNZUV8REnh3gcMYhV43Xi6rRqWIfNMlgJUEr5Mqe_W9X_Nyb8nnY8Zk0o4Q01DiLS8aBfyrqsQgewuVKb6rRkNUJlJf28UFnsVLzXKRmjTh7Q5DPLtwecCqWPPkzILK1bued4g9TxcX4NndVZk9EF6ln_AMdDlizrxFC2qt-tOfdnkl5ElcdC.mqwFvS8NsiqQ5hnhP3RF0Q; path=/; expires=Fri, 22 Nov 2024 00:29:04 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-pdx1-60015.pdx1.amazon.com\r\nX-Request-Id: 5b8a2ac7-c4b4-4b73-8a63-2caa1ac118c9\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1ac6\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"MnSHJWY2aaMjLLzWVF7cVrF1a2IgV41hMvHtxa6YbTZeHzqk44487pCl7wdofan26NwA3qHjcgWCj+HmnR6KRA==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;XNSbhgkC8t7KtnXl+zlWtKWCo48xcPELY4VyzagkjzEwvyYHjLqnk3k/JjTHGiMU/CvIM7DEDm/T+37um6JoQw==&quot;,&quot;session_uuid&quot;:&quot;2aeb7a12c600db8aba33cc0ba23af90f&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%2F\\u0026client_id=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%3A443\\u0026scope=openid\\u0026response_type=id_token\\u0026nonce=9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b\\u0026sentry_handler_version=midwaygateway\\u0026response_mode=query\\u0026state=%2F&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"xiJcagMwop/qGZniR1HCRw7JN0N7IENyu4EPQqUy4wmqSeHrhoj30lmQyjN7crfnV2Bc//qUvBYL/wNhlrQEew==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%2F&amp;client_id=https%3A%2F%2Fs3-throttleco-prod-syd.aka.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;state=%2F\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Eric, Sunitha, Chris, David, Alex, Carl, Misha, Matt, Tyler, Pratik, Stefan, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "6fafebb71e465c9845222869def0f264",
         "datammh3" : 1516287730,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "f7fe7df40e3a5396966920009d135eb7",
            "sha1" : "426271a94269fae9b22acaa48f60098bf5fa467e",
            "sha256" : "6302095d2194bc11c784f2813ca6325e242f9c60b1b5f3f8a8a49f64d47f0479"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "52.94.208.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-onebox-pdx1",
            "midway-auth-pdx",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-onebox-pdx1.pdx.amazon.com",
            "midway-auth-pdx.pdx.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.pdx.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "52.94.208.118",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "06:b8:42:38:34:98:bf:da:57:fa:d1:ec:53:b1:d1:95",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::3",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "pdx.amazon.com",
            "pdx.proxy.amazon.com",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.pdx.amazon.com",
               "midway-auth-pdx.pdx.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth-onebox-pdx1.pdx.amazon.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.pdx.amazon.com"
         },
         "subnet" : "52.94.208.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-01-23T23:59:59Z",
            "notbefore" : "2024-02-03T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.94.218.63:443 (tcp/http/tls) - last seen on 2024-11-21 at 04:05:06 UTC

    • IP
      52.94.218.63
      Network
      52.94.208.0/20
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux amazon
      URL

      https://midway-auth.amazon.com/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false 200

      HTTP Title
      Midway Authentication Portal
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::4
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      a2z.com amazon.com amazon.dev amazonaws.com aws.dev
      Hostname(s)
      auth.midway.amazon.dev auth.midway.aws.a2z.com auth.midway.aws.dev midway-auth-dub.dub.proxy.amazon.com midway-auth-iad.iad.proxy.amazon.com midway-auth-onebox-iad55.iad.amazon.com midway-auth-onebox-pdx1.pdx.amazon.com midway-auth-pdx.pdx.proxy.amazon.com midway-auth.amazon.com midway-auth.dub.amazon.com midway-auth.iad.amazon.com midway-auth.pdx.amazon.com otp.midway-auth-lbr.amazon.com otp.midway-auth-lbr.amazonaws.com
      IP(s)
      52.94.208.118 52.94.216.111 52.94.218.63 52.94.224.69 52.94.232.98 54.239.22.32 54.240.253.157
      Port(s)
      443
      Protocol(s)
      http
      Tag(s)
      URL(s)
      /login?next=%2F /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Ffrontend.pdx.gamma.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3D95f3c1631145a606112bcad3b4f90f7b87a8829b465d02d4d0e84487f3fa36b4&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%252F%26client_id%3Dhttps%253A%252F%252Fpdx.website.beta.mechanic.aws.a2z.com%253A443%26scope%3Dopenid%26sentry_handler_version%3DMidwayNginxModule-1.7-1%26response_type%3Did_token%26nonce%3Dd547f27ea80faa2eb1147837e7ca3339c9e3f6f178f870cc6b871e4df34d4163&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%26client_id%3Dhttps%253A%252F%252Fromiking.us-east-1.sso.operatornet.aws.a2z.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D66542bd9d3504493d396d831b1159aba6527d0b8ed5159cf3ed35c3511a33080%26response_mode%3Dquery%26state%3DeyJwYXRoIjoiLyJ9%26sentry_handler_version%3Dinterceptor-core-1.x&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-mdw.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D760c47079cfba5d6ed875b0cfc553d3bb41086b5f7d6a8510376b23467cf8aea%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3-throttleco-prod-syd.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D9864741b74602dfe569fa5d8a05abf8f4ce7f48ddfb1e3e142c9ba57e490d62b%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%252F%26client_id%3Dhttps%253A%252F%252Fs3bakerstreet-prod-cmh.aka.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D082389e3270a6c5ad9b75a72a2443deab8ba4713e95f580874fd836444376fb8%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26state%3D%252F&require_digital_identity=false /login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%3A%2F%2F54.244.13.246%2Fverify_midway%3Fredirect_to%3D%25252F%26client_id%3Dscarf.forecasting.aws.a2z.com%26response_type%3Did_token%26scope%3Dopenid%26nonce%3D6798246118732134&require_digital_identity=false
    • Operating System
      Linux Linux amazon
      Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M01
      Issuer Organization
      Amazon
      Subject Common Name
      midway-auth.dub.amazon.com
      Subject Alt Name
      midway-auth.dub.amazon.com midway-auth-dub.dub.proxy.amazon.com otp.midway-auth-lbr.amazonaws.com midway-auth.amazon.com auth.midway.aws.a2z.com auth.midway.aws.dev auth.midway.amazon.dev
      SHA256 Fingerprint
      4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b
      Validity Not Before
      2024-11-14T00:00:00Z
      Validity Not After
      2025-11-03T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e2184b03d2253a8e08bca3759b097a9d
      HTTP Header MD5
      ddf170d75ef959ac89b1375c61b97693
      HTTP Body MD5
      5bb0e005f3a51a66f8bb6058554fd357
    • HTTP/1.1 200 OK
      Server: Server
      Date: Thu, 21 Nov 2024 04:05:06 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Download-Options: noopen
      X-Permitted-Cross-Domain-Policies: none
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'
      X-UA-Compatible: IE=Edge,chrome=1
      ETag: W/"867289f0a7c24e62666234b39d316b43"
      Cache-Control: max-age=0, private, must-revalidate
      Set-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:05:06 GMT; Secure; SameSite=None
      Set-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..Siyi9PiQr3GHKNfsN3SIlA.iyCMf06BDImLbBMTGFeWXA2M-tEDp3gdWW17vziqDaz-LsF3xoBh5cx-1H_k0Eh5qks_-RD1RLLGE2Hteu65t6mj9B6FueVbK-MAyREDcu1QbvY86uJl4d5C93PHS82TOXvL28FHpaF7aIH8CZWgjHBPUCb8vfpdVg3WgBvqGJQ2tz9VXCi-XfbijPJs9mKyADy8OtIFzz511RqbU-D5Rs4ONvi6d2vokiuPiThhag_UYGdjS1HRyJkShEockjgw.Dl8gUupz89z7armemGlEbw; path=/; expires=Fri, 22 Nov 2024 00:05:06 GMT; secure; HttpOnly; SameSite=None
      X-Host: midway-auth-prod-dub4-14010.dub4.amazon.com
      X-Request-Id: e799b912-f71f-49c6-8be5-74330d5a2910
      Strict-Transport-Security: max-age=63072000; includeSubDomains
      
      1b0e
      <!DOCTYPE html>
      <html lang='en'>
      <head>
      <title>Midway Authentication Portal</title>
      <link rel="stylesheet" media="all" href="/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css" />
      <script src="/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js"></script>
      <script src="/packs/js/client-side-metrics-e680371f2d0ba09e8361.js"></script>
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="BoSBFT6fikFrbpWY66KcY7tQ7Rov4qAuYPa1XDoZWEv/BcxSFbyAL+p1kqoEMiwZDSSt75yAunT+AwgiHp/Lvw==" />
      <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1" />
      </head>
      <body>
      <script src="/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js" defer="defer"></script>
      <main>
          <div class="banner-item">
            You are using old UI, to switch to new UI click
            <button id="switch-to-new-ui-button">here</button>
          </div>
      
      
        <form id="fpr_form" name="fpr_form"></form>
        <section id="base-pane">
          <div id="login-pane">
            <div id="input-params" data-session-status="{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;5jCvxuYREY21/pacKu7ZO8qtO6K8NQYyBovOZ+x8tDQfseKBzTIb4zTlka7FfmlBfNl7Vw9XHGiYfnMZyPonwA==&quot;,&quot;session_uuid&quot;:&quot;1787da15f86dc593f28861b97ac92aec&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}" data-js-params="{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Ffcmenu-nrt-regionalized.corp.amazon.com%2F\u0026client_id=fcmenu-nrt-regionalized.corp.amazon.com%3A443\u0026scope=openid\u0026response_type=id_token\u0026nonce=864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540\u0026sentry_handler_version=midwaygateway\u0026response_mode=query\u0026acr_values=kerberos\u0026use_sentry_key=1\u0026state=%2F&quot;}"></div>
            <h2>Sign in</h2>
            <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->
            <h2 hidden>Sign in with Midway</h2>
            <div class="ta-right">
              <a class="medium-heavy-text small-text" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Why am I here?</a>
            </div>
      
            <form id="login_form" action="/api/login" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" autocomplete="off" /><input type="hidden" name="authenticity_token" value="9jg+KcNgt8qJwMazcAxA9G6otVU16GB4K3+YohaucaoPuXNu6EO9pAjbwYGfnPCO2Nz1oIaKeiK1iiXcMijiXg==" autocomplete="off" />
              <input type="hidden" name="old_login_form" id="old_login_form" value="true" autocomplete="off" />
              <input type="hidden" name="next" id="next" value="/SSO/redirect?redirect_uri=https%3A%2F%2Ffcmenu-nrt-regionalized.corp.amazon.com%2F&amp;client_id=fcmenu-nrt-regionalized.corp.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;acr_values=kerberos&amp;use_sentry_key=1&amp;state=%2F" autocomplete="off" />
              <p>
                <label for="user_name">Amazon username</label><br/>
                <input type="text" name="user_name" id="user_name" value="" placeholder="Enter your Amazon username" autocomplete="username" autocorrect="off" autocapitalize="off" spellcheck="false" />
              </p>
      
              <p>
              <div class="row">
                <div class="cell-50">
                  <label for="password">PIN</label>
                </div>
                <div class="cell-50 ta-right">
                  <a class="medium-heavy-text small-text" href="https://password-v2.corp.amazon.com/selfReset">Reset password</a>
                </div>
              </div>
              <input type="password" name="password" id="password" value="" placeholder="Enter your security key PIN" autocomplete="current-password" autocorrect="off" autocapitalize="off" />
              <p>
                <input type="submit" name="commit" value="Sign in" class="login-button inline-button orange-button" id="verify_btn" data-disable-with="Sign in" />
              <p id="error-message" class="m1-red ta-center mb-0 invisible" tabindex="0">Error</p>
              <p id="forgot-password" class="ta-center mb-0" hidden>
                <a href="https://password-v2.corp.amazon.com/selfReset">Did you forget your password?</a></p>
      </form>    </div>
      
          <div id="u2f-login-pane" class="ta-center" hidden>
            <h2>Second factor required</h2>
            <div class="row pb-1 pl-2 flex-container">
              <div class="cell-20 hide-small">
                <img height="128" alt="Security key with lock" src="/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png" />
              </div>
              <div class="cell-80 ta-left cell-100-small move-to-end-small">
                <ol class="no-indent">
                  <li>Plug your security key into a USB slot on your computer</li>
                  <li>Touch your security key</li>
                    <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>
                </ol>
              </div>
                <div class="cell-80">
                  <p>
                  <form action="/api/yubiotp/login" method="post">
                    <input id="otp-field" name="otp" autocomplete="off" class="otp-field" autocapitalize="none" style="width: 185px">
                    <input id="otp-submit-btn" type="submit" value="Submit">
                  </form>
                  <p id="u2f-error-message" class="m1-red" hidden></p>
                </div>
            </div>
          </div>
      
          <div id="redirect-pane" class="ta-center" hidden>
            <h2 class="green"> Authentication Successful</h2>
            <br/>
            <br/>
            <h3 class="">Now redirecting you to <span id="redirect-url"></span></h3>
            <br/>
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
      
          <div id="loadingDiv" class="ta-center invisible">
            <img alt="Spinning processing circle" src="/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif" />
          </div>
        </section>
        
        <footer>
          <p>
            Secured by  <a id="help_link" href="https://w.amazon.com/index.php/NextGenMidway/FAQ">Midway</a>. For login issues, 
            <a href="https://firstaid.it.a2z.com/chat">chat with IT support</a>.
          </p>
      
          <img height="32" class="mt-2" alt="Amazon logo" title="Midway is brought to you by Alex, Tyler, Carl, Sunitha, Matt, Eric, David, Stefan, Chris, Misha, Pratik, and more!" src="/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png" />
        </footer>
      
      </main>
      
      <script src="/packs/js/old-ui-3a5bdbeca59dd72fa883.js"></script>
      </body>
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T04:05:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "cloudfront.net",
                  "amazon.com",
                  "a2z.com"
               ],
               "hostname" : [
                  "d3s096xoykcjlq.cloudfront.net",
                  "firstaid.it.a2z.com",
                  "midway-static.amazon.com",
                  "password-v2.corp.amazon.com",
                  "unagi-na.amazon.com",
                  "w.amazon.com"
               ],
               "url" : [
                  "https://d3s096xoykcjlq.cloudfront.net",
                  "https://firstaid.it.a2z.com/chat",
                  "https://midway-static.amazon.com/app-id.json",
                  "https://password-v2.corp.amazon.com/selfReset",
                  "https://unagi-na.amazon.com",
                  "https://w.amazon.com/index.php/NextGenMidway/FAQ"
               ]
            },
            "http" : {
               "bodymd5" : "5bb0e005f3a51a66f8bb6058554fd357",
               "bodymmh3" : -1700431892,
               "header" : [
                  {
                     "value" : "W/\"867289f0a7c24e62666234b39d316b43",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "ddf170d75ef959ac89b1375c61b97693",
               "headermmh3" : -844217979,
               "title" : "Midway Authentication Portal"
            },
            "length" : 8532
         },
         "asn" : "AS16509",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Dublin",
         "company" : {
            "country" : "<enterprise field>: company.country",
            "globalrank" : "<enterprise field>: company.globalrank",
            "industry" : "<enterprise field>: company.industry",
            "name" : "<enterprise field>: company.name",
            "sector" : "<enterprise field>: company.sector"
         },
         "country" : "IE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Thu, 21 Nov 2024 04:05:06 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://d3s096xoykcjlq.cloudfront.net; style-src 'self' https://d3s096xoykcjlq.cloudfront.net; img-src 'self' https://d3s096xoykcjlq.cloudfront.net; connect-src 'self' https://midway-static.amazon.com/app-id.json https://unagi-na.amazon.com; object-src 'none'; frame-ancestors 'self'\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nETag: W/\"867289f0a7c24e62666234b39d316b43\"\r\nCache-Control: max-age=0, private, must-revalidate\r\nSet-Cookie: kerberos_disabled=1; path=/; expires=Fri, 21 Nov 2025 04:05:06 GMT; Secure; SameSite=None\r\nSet-Cookie: session=eyJraWQiOiIzMzUiLCJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..Siyi9PiQr3GHKNfsN3SIlA.iyCMf06BDImLbBMTGFeWXA2M-tEDp3gdWW17vziqDaz-LsF3xoBh5cx-1H_k0Eh5qks_-RD1RLLGE2Hteu65t6mj9B6FueVbK-MAyREDcu1QbvY86uJl4d5C93PHS82TOXvL28FHpaF7aIH8CZWgjHBPUCb8vfpdVg3WgBvqGJQ2tz9VXCi-XfbijPJs9mKyADy8OtIFzz511RqbU-D5Rs4ONvi6d2vokiuPiThhag_UYGdjS1HRyJkShEockjgw.Dl8gUupz89z7armemGlEbw; path=/; expires=Fri, 22 Nov 2024 00:05:06 GMT; secure; HttpOnly; SameSite=None\r\nX-Host: midway-auth-prod-dub4-14010.dub4.amazon.com\r\nX-Request-Id: e799b912-f71f-49c6-8be5-74330d5a2910\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\n\r\n1b0e\r\n<!DOCTYPE html>\n<html lang='en'>\n<head>\n<title>Midway Authentication Portal</title>\n<link rel=\"stylesheet\" media=\"all\" href=\"/assets/application-6f214fe947c0edd4efaa0177e590dd6b201ba0b1eb0324263498e235c5262cbe.css\" />\n<script src=\"/assets/application-f6fff0e6bde057c3cbfdd0338d34b0056b8b007d106c0a26b3190271b98d9c36.js\"></script>\n<script src=\"/packs/js/client-side-metrics-e680371f2d0ba09e8361.js\"></script>\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"BoSBFT6fikFrbpWY66KcY7tQ7Rov4qAuYPa1XDoZWEv/BcxSFbyAL+p1kqoEMiwZDSSt75yAunT+AwgiHp/Lvw==\" />\n<meta id=\"viewport\" name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n</head>\n<body>\n<script src=\"/assets/login-5f4607a3effee4c149258f44642a94045f30f57302e2a1145be74744ea3e376a.js\" defer=\"defer\"></script>\n<main>\n    <div class=\"banner-item\">\n      You are using old UI, to switch to new UI click\n      <button id=\"switch-to-new-ui-button\">here</button>\n    </div>\n\n\n  <form id=\"fpr_form\" name=\"fpr_form\"></form>\n  <section id=\"base-pane\">\n    <div id=\"login-pane\">\n      <div id=\"input-params\" data-session-status=\"{&quot;csrf_param&quot;:&quot;authenticity_token&quot;,&quot;csrf_token&quot;:&quot;5jCvxuYREY21/pacKu7ZO8qtO6K8NQYyBovOZ+x8tDQfseKBzTIb4zTlka7FfmlBfNl7Vw9XHGiYfnMZyPonwA==&quot;,&quot;session_uuid&quot;:&quot;1787da15f86dc593f28861b97ac92aec&quot;,&quot;client_cert_valid&quot;:false,&quot;totp_enabled&quot;:true,&quot;display_otp_enabled&quot;:true,&quot;mcs_andon_cord_pulled&quot;:false,&quot;otp_enabled&quot;:true,&quot;authenticated&quot;:false,&quot;auth_prompt&quot;:&quot;Password&quot;}\" data-js-params=\"{&quot;next&quot;:&quot;/SSO/redirect?redirect_uri=https%3A%2F%2Ffcmenu-nrt-regionalized.corp.amazon.com%2F\\u0026client_id=fcmenu-nrt-regionalized.corp.amazon.com%3A443\\u0026scope=openid\\u0026response_type=id_token\\u0026nonce=864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540\\u0026sentry_handler_version=midwaygateway\\u0026response_mode=query\\u0026acr_values=kerberos\\u0026use_sentry_key=1\\u0026state=%2F&quot;}\"></div>\n      <h2>Sign in</h2>\n      <!--This hidden header is added because many canaries look for this text to know that they are on a Midway page-->\n      <h2 hidden>Sign in with Midway</h2>\n      <div class=\"ta-right\">\n        <a class=\"medium-heavy-text small-text\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Why am I here?</a>\n      </div>\n\n      <form id=\"login_form\" action=\"/api/login\" accept-charset=\"UTF-8\" method=\"post\"><input name=\"utf8\" type=\"hidden\" value=\"&#x2713;\" autocomplete=\"off\" /><input type=\"hidden\" name=\"authenticity_token\" value=\"9jg+KcNgt8qJwMazcAxA9G6otVU16GB4K3+YohaucaoPuXNu6EO9pAjbwYGfnPCO2Nz1oIaKeiK1iiXcMijiXg==\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"old_login_form\" id=\"old_login_form\" value=\"true\" autocomplete=\"off\" />\n        <input type=\"hidden\" name=\"next\" id=\"next\" value=\"/SSO/redirect?redirect_uri=https%3A%2F%2Ffcmenu-nrt-regionalized.corp.amazon.com%2F&amp;client_id=fcmenu-nrt-regionalized.corp.amazon.com%3A443&amp;scope=openid&amp;response_type=id_token&amp;nonce=864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540&amp;sentry_handler_version=midwaygateway&amp;response_mode=query&amp;acr_values=kerberos&amp;use_sentry_key=1&amp;state=%2F\" autocomplete=\"off\" />\n        <p>\n          <label for=\"user_name\">Amazon username</label><br/>\n          <input type=\"text\" name=\"user_name\" id=\"user_name\" value=\"\" placeholder=\"Enter your Amazon username\" autocomplete=\"username\" autocorrect=\"off\" autocapitalize=\"off\" spellcheck=\"false\" />\n        </p>\n\n        <p>\n        <div class=\"row\">\n          <div class=\"cell-50\">\n            <label for=\"password\">PIN</label>\n          </div>\n          <div class=\"cell-50 ta-right\">\n            <a class=\"medium-heavy-text small-text\" href=\"https://password-v2.corp.amazon.com/selfReset\">Reset password</a>\n          </div>\n        </div>\n        <input type=\"password\" name=\"password\" id=\"password\" value=\"\" placeholder=\"Enter your security key PIN\" autocomplete=\"current-password\" autocorrect=\"off\" autocapitalize=\"off\" />\n        <p>\n          <input type=\"submit\" name=\"commit\" value=\"Sign in\" class=\"login-button inline-button orange-button\" id=\"verify_btn\" data-disable-with=\"Sign in\" />\n        <p id=\"error-message\" class=\"m1-red ta-center mb-0 invisible\" tabindex=\"0\">Error</p>\n        <p id=\"forgot-password\" class=\"ta-center mb-0\" hidden>\n          <a href=\"https://password-v2.corp.amazon.com/selfReset\">Did you forget your password?</a></p>\n</form>    </div>\n\n    <div id=\"u2f-login-pane\" class=\"ta-center\" hidden>\n      <h2>Second factor required</h2>\n      <div class=\"row pb-1 pl-2 flex-container\">\n        <div class=\"cell-20 hide-small\">\n          <img height=\"128\" alt=\"Security key with lock\" src=\"/assets/yubikey-with-lock-4617700bf1ac51a21ee884c1e5b8208eb7c9fff492246a69ec718c8654e75cdd.png\" />\n        </div>\n        <div class=\"cell-80 ta-left cell-100-small move-to-end-small\">\n          <ol class=\"no-indent\">\n            <li>Plug your security key into a USB slot on your computer</li>\n            <li>Touch your security key</li>\n              <li>Or, if short touch does not work press and hold for 3 seconds to activate OTP</li>\n          </ol>\n        </div>\n          <div class=\"cell-80\">\n            <p>\n            <form action=\"/api/yubiotp/login\" method=\"post\">\n              <input id=\"otp-field\" name=\"otp\" autocomplete=\"off\" class=\"otp-field\" autocapitalize=\"none\" style=\"width: 185px\">\n              <input id=\"otp-submit-btn\" type=\"submit\" value=\"Submit\">\n            </form>\n            <p id=\"u2f-error-message\" class=\"m1-red\" hidden></p>\n          </div>\n      </div>\n    </div>\n\n    <div id=\"redirect-pane\" class=\"ta-center\" hidden>\n      <h2 class=\"green\"> Authentication Successful</h2>\n      <br/>\n      <br/>\n      <h3 class=\"\">Now redirecting you to <span id=\"redirect-url\"></span></h3>\n      <br/>\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n\n    <div id=\"loadingDiv\" class=\"ta-center invisible\">\n      <img alt=\"Spinning processing circle\" src=\"/assets/ajax-spinner-4e6e1fb3f08a162cfd4f8fb435769612a801c3cea4684b1efc71455e3795c5ca.gif\" />\n    </div>\n  </section>\n  \n  <footer>\n    <p>\n      Secured by  <a id=\"help_link\" href=\"https://w.amazon.com/index.php/NextGenMidway/FAQ\">Midway</a>. For login issues, \n      <a href=\"https://firstaid.it.a2z.com/chat\">chat with IT support</a>.\n    </p>\n\n    <img height=\"32\" class=\"mt-2\" alt=\"Amazon logo\" title=\"Midway is brought to you by Alex, Tyler, Carl, Sunitha, Matt, Eric, David, Stefan, Chris, Misha, Pratik, and more!\" src=\"/assets/amazon-logo-f589d03bb13bcabcfcfdd596bf2f0c4bc4996adc605cc737991ce9c6a0025be6.png\" />\n  </footer>\n\n</main>\n\n<script src=\"/packs/js/old-ui-3a5bdbeca59dd72fa883.js\"></script>\n</body>\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "e2184b03d2253a8e08bca3759b097a9d",
         "datammh3" : 1418313230,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "a2z.com",
            "amazon.com",
            "amazon.dev",
            "amazonaws.com",
            "aws.dev"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "a292971a812efdf4a5ceb4208f5ca1ff",
            "sha1" : "3cef1449b25c02ac0ff4ed85ee189e79ba717a49",
            "sha256" : "4caac1c1e44693fa02029173b5b9eefaad2e183f981241fdbdfbfb0fd27f9c1b"
         },
         "forward" : "midway-auth.amazon.com",
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IE",
            "countryname" : "Ireland",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "true",
            "latitude" : "53.41291",
            "location" : "53.41291,-8.24389",
            "longitude" : "-8.24389",
            "netname" : "AMAZON-DUB",
            "organization" : "Amazon Data Services Ireland Limited",
            "subnet" : "52.94.216.0/21"
         },
         "host" : [
            "auth",
            "midway-auth",
            "midway-auth-dub",
            "otp"
         ],
         "hostname" : [
            "auth.midway.amazon.dev",
            "auth.midway.aws.a2z.com",
            "auth.midway.aws.dev",
            "midway-auth-dub.dub.proxy.amazon.com",
            "midway-auth.amazon.com",
            "midway-auth.dub.amazon.com",
            "otp.midway-auth-lbr.amazonaws.com"
         ],
         "ip" : "52.94.218.63",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M01",
            "country" : "US",
            "organization" : "Amazon"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "53.3379",
         "location" : "53.3379,-6.2591",
         "longitude" : "-6.2591",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "amazon",
         "osvendor" : "Linux",
         "port" : 443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "0b:b5:4c:89:4c:89:e6:ef:8e:10:81:ce:5a:a1:bf:34",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::4",
         "status" : 200,
         "subdomains" : [
            "aws.a2z.com",
            "dub.amazon.com",
            "dub.proxy.amazon.com",
            "midway-auth-lbr.amazonaws.com",
            "midway.amazon.dev",
            "midway.aws.a2z.com",
            "midway.aws.dev",
            "proxy.amazon.com"
         ],
         "subject" : {
            "altname" : [
               "midway-auth.dub.amazon.com",
               "midway-auth-dub.dub.proxy.amazon.com",
               "otp.midway-auth-lbr.amazonaws.com",
               "midway-auth.amazon.com",
               "auth.midway.aws.a2z.com",
               "auth.midway.aws.dev",
               "auth.midway.amazon.dev"
            ],
            "commonname" : "midway-auth.dub.amazon.com"
         },
         "subnet" : "52.94.208.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "dev"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/login?next=%2FSSO%2Fredirect%3Fredirect_uri%3Dhttps%253A%252F%252Ffcmenu-nrt-regionalized.corp.amazon.com%252F%26client_id%3Dfcmenu-nrt-regionalized.corp.amazon.com%253A443%26scope%3Dopenid%26response_type%3Did_token%26nonce%3D864bc299f730380b210ef517ec535aa06699b8c44c7b929a864e82d2506fc540%26sentry_handler_version%3Dmidwaygateway%26response_mode%3Dquery%26acr_values%3Dkerberos%26use_sentry_key%3D1%26state%3D%252F&require_digital_identity=false",
         "validity" : {
            "notafter" : "2025-11-03T23:59:59Z",
            "notbefore" : "2024-11-14T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }