Report - bhilainagarnigam.com/support/www.aramex.com

Report Overview

Submitted URL
bhilainagarnigam.com/support/www.aramex.com
IP
172.67.184.218
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 03:44:26
Access
public
Website Title
Express Services
Final URL
bhilainagarnigam.com/support/www.aramex.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bhilainagarnigam.com	unknown	2005-10-18	2014-01-16	2024-04-17	1.7 kB	105 kB	172.67.184.218
www.aramex.com	81273	1995-11-25	2012-07-21	2024-03-05	3.2 kB	246 kB	23.36.79.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	bhilainagarnigam.com/support/www.aramex.com/	Aramex
2024-04-16	medium	bhilainagarnigam.com/support/www.aramex.com	Aramex

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	bhilainagarnigam.com/support/www.aramex.com/	367 B	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 45d16e96f5a0f6f6107bed902560a6ea 723bdc831cccdc407c4dc5b5d7727d0ce94abf44 a739b2c68a52c767bf10558f987020ec9a4efd574c9e17c1dea57729ac196dfd Loading...

	bhilainagarnigam.com/support/www.aramex.com/	1.4 kB	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 653be3f4fd7777d3735ae147d2c85cee d4f46bd8dc1a2f78b6175241badc634caf82d098 d3bce899761961cbcccf827562c4243a59fd852da30d7d4fb94b28c3f37dbb68 Loading...

	bhilainagarnigam.com/support/www.aramex.com/0x3.js	88 kB	2023-06-05	2024-04-29
Pretty URL bhilainagarnigam.com/support/www.aramex.com/0x3.js IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-05 16:56:04 Last Seen2024-04-29 19:38:10 Times Seen1027 Hash 4fcf018b5c604c47ae980185cf0167c2 fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61 32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a Loading...

	bhilainagarnigam.com/support/www.aramex.com/	1.2 kB	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 7526cf128a6c9b90f3766d2e12ed306d 33e486b9ac16b3c082cb51fc179ab7563b713c01 d3b0760fb3da5242fd993846bec83de9705e2079d54a77b8b0c5f85493ee724d Loading...

HTTP Transactions (10)

URL IP Response Size

bhilainagarnigam.com/support/www.aramex.com/

172.67.184.218

200 OK

11 kB

URL User Request GET HTTP/1.1
bhilainagarnigam.com/support/www.aramex.com/
IP
172.67.184.218:80
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (345), with CRLF line terminators
Size
11 kB (10577 bytes)
Hash
6cc367c71c81ff5cc9099397d3bd3ed0
580f989d554b30a3e884faedd52568b614a0741f
c8d91cf569144db9c731d43ecb2fe9fb4b34d6f9996396aadf837812c14dbc93

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Aramex

HTTP Headers

GET /support/www.aramex.com/ HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 03:44:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=q323o1nvfnvfc82t47f94u0u36; path=/
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rShcMjdY9srNhZQ7kBGs1AMIknnDy5WrauJUTHAV%2F2p0veUv4rz1w%2BT845%2FNhTj6FAtRvnzDJLGzkmjvCMZaspjHYfGc%2Bqn%2BukPlfjC51pDdFrN5Z%2FPepJphdiv8bBIoxJD5FZCDlg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87596a095b0fb4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.aramex.com/docs/default-source/site-assets/aramex-logo.svg

23.36.79.34

200 OK

2.3 kB

URL GET HTTP/2
www.aramex.com/docs/default-source/site-assets/aramex-logo.svg
IP
23.36.79.34:443
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2274 bytes)
Hash
f484b593c2387746a054f521e313ec93
8448e96f9e03ed3a82de4ac698f1fe78e37ff638
e0447aa04943d0d047baf922ce6f286da4e50d62113aa19505f75705a9a46773

HTTP Headers

GET /docs/default-source/site-assets/aramex-logo.svg HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
pragma: no-cache
ntcoent-length: 7280
content-type: image/svg+xml
content-security-policy: default-src 'self' dotcomaramexprod.blob.core.windows.net ;script-src https://assets.what3words.com/ https://assets.what3words.com/ https://cdn-cookieyes.com/ https://static.ads-twitter.com/uwt.js https://prod-live-chat.sprinklr.com/ https://live-chat-static.sprinklr.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://ajax.aspnetcdn.com/ https://unpkg.com/ www.youtube.com https://consentcdn.cookiebot.com/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com  http://cdn.pardot.com/ https://info.aramex.com/ https://pi.pardot.com/ https://snap.licdn.com/ https://connect.facebook.net/ https://www.googleadservices.com/  aramex.api.sociaplus.com https://npmcdn.com https://app.powerbi.com https://v1.addthisedge.com https://reverse.geocoder.cit.api.here.com dotcomaramexdev.blob.core.windows.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval' https://m.addthisedge.com http://js.api.here.com https://code.jquery.com *.facebook.com *.addthis.com  www.googletagmanager.com api.sociaplus.com js.cit.api.here.com www.google-analytics.com cdnjs.cloudflare.com tools.euroland.com aramex.api.sociaplus.com 1.pano.maps.cit.api.here.com locationv2.api.sociaplus.com 1.base.maps.cit.api.here.com 1.aerial.maps.cit.api.here.com 1.traffic.maps.cit.api.here.com 1.base.maps.cit.api.here.com route.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://static.ads-twitter.com/uwt.js ;style-src 'self' js.api.here.com fonts.googleapis.com js.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ http://js.api.here.com aramex.api.sociaplus.com tagmanager.google.com www.gstatic.com cdnjs.cloudflare.com gamma.euroland.com tools.euroland.com 'unsafe-inline' https://cdn.jsdelivr.net/ https://td.doubleclick.net/ ;img-src * blob: data:;font-src 'self' fonts.gstatic.com https: data:; connect-src 'self' https: http:;form-action www.facebook.com 'self'  'unsafe-inline'https://tpay1.digitsecure.com/; frame-src https://recaptcha.google.com/recaptcha/ https://www.google.com/recaptcha/ dotcomaramexprod.blob.core.windows.net consentcdn.cookiebot.com www.facebook.com ' 'self' https://app.powerbi.com charts3.equitystory.com  https://app.powerbi.com charts3.equitystory.com  irpages2.equitystory.com charts25.equitystory.com qas4.equitystory.com gamma.euroland.com tools.euroland.com tools.eurolandir.com aramex.api.sociaplus.com api.sociaplus.com *.addthis.com www.youtube.com aramex-fior.typeform.com qas4.equitystory.com charts25.equitystory.com
referrer-policy: strict-origin-when-cross-origin
x-ua-compatible: IE=edge
content-disposition: inline; filename=aramex-logo.svg
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
content-encoding: gzip
content-length: 2274
cache-control: max-age=1691586
date: Wed, 17 Apr 2024 03:44:02 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, dtSInfo;desc="1", ak_p; desc="1713325442322_388255518_208042081_47_5531_2_0_11";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.1e4f2417.1713325442.c667861
X-Firefox-Spdy: h2

www.aramex.com/Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg

23.36.79.34

200 OK

8.4 kB

URL GET HTTP/2
www.aramex.com/Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg
IP
23.36.79.34:443
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
SVG Scalable Vector Graphics image
Size
8.4 kB (8444 bytes)
Hash
497d51c402f94c1c8568d642c745541d
f64623f9beaa3cffe12d06533d2dde5ac788f8e0
d237f4128b2589d9ece69a734db38a0d40918971670ea6be77117eb565d1b7e1

HTTP Headers

GET /Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 21 Mar 2024 20:08:54 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
cteonnt-length: 18729
content-encoding: gzip
content-length: 8444
cache-control: public, max-age=1778320
date: Wed, 17 Apr 2024 03:44:02 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713325442323_388255518_208042082_47_4850_2_0_11";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.1e4f2417.1713325442.c667862
X-Firefox-Spdy: h2

www.aramex.com//WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000

23.36.79.34

215 B

URL GET
www.aramex.com//WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000
IP
23.36.79.34:0
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
215 B (215 bytes)
Hash
1b6456dbc0318637b2125cb9b720df07
49dae2187692101e12a6fb1a742370f53aa6cfed
793584d63c20f3a68cd469c0ba2519bbb9f845217a54b6f211c5c1d89bdcf9ad

HTTP Headers

GET //WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000 HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=b1c37d39855c4e46b960279adcc83ae5
content-security-policy: default-src 'self' dotcomaramexprod.blob.core.windows.net ;script-src https://assets.what3words.com/ https://assets.what3words.com/ https://cdn-cookieyes.com/ https://static.ads-twitter.com/uwt.js https://prod-live-chat.sprinklr.com/ https://live-chat-static.sprinklr.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://ajax.aspnetcdn.com/ https://unpkg.com/ www.youtube.com https://consentcdn.cookiebot.com/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com  http://cdn.pardot.com/ https://info.aramex.com/ https://pi.pardot.com/ https://snap.licdn.com/ https://connect.facebook.net/ https://www.googleadservices.com/  aramex.api.sociaplus.com https://npmcdn.com https://app.powerbi.com https://v1.addthisedge.com https://reverse.geocoder.cit.api.here.com dotcomaramexdev.blob.core.windows.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval' https://m.addthisedge.com http://js.api.here.com https://code.jquery.com *.facebook.com *.addthis.com  www.googletagmanager.com api.sociaplus.com js.cit.api.here.com www.google-analytics.com cdnjs.cloudflare.com tools.euroland.com aramex.api.sociaplus.com 1.pano.maps.cit.api.here.com locationv2.api.sociaplus.com 1.base.maps.cit.api.here.com 1.aerial.maps.cit.api.here.com 1.traffic.maps.cit.api.here.com 1.base.maps.cit.api.here.com route.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://static.ads-twitter.com/uwt.js ;style-src 'self' js.api.here.com fonts.googleapis.com js.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ http://js.api.here.com aramex.api.sociaplus.com tagmanager.google.com www.gstatic.com cdnjs.cloudflare.com gamma.euroland.com tools.euroland.com 'unsafe-inline' https://cdn.jsdelivr.net/ https://td.doubleclick.net/ ;img-src * blob: data:;font-src 'self' fonts.gstatic.com https: data:; connect-src 'self' https: http:;form-action www.facebook.com 'self'  'unsafe-inline'https://tpay1.digitsecure.com/; frame-src https://recaptcha.google.com/recaptcha/ https://www.google.com/recaptcha/ dotcomaramexprod.blob.core.windows.net consentcdn.cookiebot.com www.facebook.com ' 'self' https://app.powerbi.com charts3.equitystory.com  https://app.powerbi.com charts3.equitystory.com  irpages2.equitystory.com charts25.equitystory.com qas4.equitystory.com gamma.euroland.com tools.euroland.com tools.eurolandir.com aramex.api.sociaplus.com api.sociaplus.com *.addthis.com www.youtube.com aramex-fior.typeform.com qas4.equitystory.com charts25.equitystory.com
referrer-policy: strict-origin-when-cross-origin
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
content-length: 215
expires: Wed, 17 Apr 2024 03:44:02 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 17 Apr 2024 03:44:02 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=70, origin; dur=49, ak_p; desc="1713325442323_388255518_208042084_11789_4635_2_0_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: NotCacheable from child
akamai-grn: 0.1e4f2417.1713325442.c667864
set-cookie: ak_bmsc=6F393651F070916E5EF3D5D2DB93F13B~000000000000000000000000000000~YAAQHk8kF8pRAOaOAQAAjoUn6hd9znCfKT+neYCgoqMH4fY7HuKVCGGuTb22oRzJGgV5ukkEY2o4KKuTKQC3S4WoiVcc/pOdUSc+5rEMbG7OAXwqI3+4swAAnpHzLY/YzLqfVvwqL27iYi5biqu7mzUNEUKjvXy2hY1S0GIRClfMZOiEDUnl8N4WG041a11joa+0W9TbBvctsvgx6QNd9m68EDWu7YWSiAAsixcxio7PUpn5edr/WsbDGXgOXocNRfsQtbkydRTssNcGFcz+A9rWpsfcMXmyUteptq5AR0gBRPJPrhYXS6hQwOWaL7BPM7cWMS4dlNE9wwVNvkIC0wLqZmgQtExkf2SB/HFYmlaA8anQhezAst+pQQ2kzzLg9MLRDoAePqTx; Domain=.aramex.com; Path=/; Expires=Wed, 17 Apr 2024 05:44:02 GMT; Max-Age=7200
X-Firefox-Spdy: h2

bhilainagarnigam.com/support/www.aramex.com

172.67.184.218

301 Moved Permanently

3.0 kB

URL User Request GET HTTP/2
bhilainagarnigam.com/support/www.aramex.com
IP
172.67.184.218:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectbhilainagarnigam.com
FingerprintA7:32:FA:09:B9:A5:94:98:96:68:94:B1:AC:F5:A8:CB:71:A5:80:0F
ValiditySat, 16 Mar 2024 23:22:15 GMT - Fri, 14 Jun 2024 23:22:14 GMT

File type
data
Size
3.0 kB (3041 bytes)
Hash
ae541ec59ec858e1ae0b64edd9f8d348
984bc6d871ce3157a6e372e199f07fe4c249255c
1d16c9b98cfc9154dd4d10d5716bbb99185ee142bd9e9cf69e29c58bb30f4489

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Aramex

HTTP Headers

GET /support/www.aramex.com HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Wed, 17 Apr 2024 03:44:01 GMT
content-type: text/html; charset=UTF-8
location: http://bhilainagarnigam.com/support/www.aramex.com/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t2MeCal521l8uat3mnq%2F2vhdeC8vZrNTRqQQq9VDqVjXxiMbfJuRVpD7lpwWzjfRoedqqinNOsNXxIcSRCTAuTBKApmXhPxII3D0m9EEQl58ZCvON6OfDbs3VacGImqjk4jYn0ekcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87596a0719ce56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.aramex.com/Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=b1c37d39855c4e46b960279adcc83ae5

23.36.79.34

4.9 kB

URL GET
www.aramex.com/Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=b1c37d39855c4e46b960279adcc83ae5
IP
23.36.79.34:0
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4269), with CRLF, LF line terminators
Size
4.9 kB (4884 bytes)
Hash
d93d70ced6109b68a38ed69bb42cd1c4
fcfe88b97c0b6e7e6f73c8de23a6ae3e20159c81
4fc5c9fdc7fb6506f793be1af489de912de06aa9d3168df91df735fea9d5f267

HTTP Headers

GET /Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=b1c37d39855c4e46b960279adcc83ae5 HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://bhilainagarnigam.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 21 Mar 2024 11:08:58 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
ntcoent-length: 6556
x-akamai-transformed: 9 2849 0 pmb=mRUM,1
content-encoding: gzip
expires: Wed, 17 Apr 2024 03:44:02 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 17 Apr 2024 03:44:02 GMT
content-length: 4884
vary: Accept-Encoding
server-timing: cdn-cache; desc=MISS, edge; dur=27, origin; dur=31, ak_p; desc="1713325442461_388255518_208042158_5859_5775_2_0_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: NotCacheable from child
akamai-grn: 0.1e4f2417.1713325442.c6678ae
set-cookie: ak_bmsc=58E4E7A7D88D848CE94466174879C817~000000000000000000000000000000~YAAQHk8kF81RAOaOAQAA3oUn6hd4MPQ+VKKAl6oFLKBLDRBziTIap+BBAluCozTqanpvIIBoS/Nz6yRmsDgBSXa6o9CF1zyyT27Nca0cNS4WZvdMZGZuxU0aWjHDicLgnQWFm37hUIEAYTIFVArPCPl/kQwy0bqWiBA5imBbDNfQMItiG3n75TLCID5D9b67xBTXGgnhBf1Rqiv3cQbaO8IlhT0kU1+CcobQXSZKsG/iFxp9LhAr8DCU/ZcLuWoPFQRW240gdFFCpByIXddiac74d52OPRgTMwZh21xT8XP6o8wLOekv4nURwmmLO3LwIzUAwmNz8OO0W70b8jIwoqveZDrkadlp+9YZmX3GjPyMkOy2xbcmt6m3CUaByUvdZQrdfrgDug/J; Domain=.aramex.com; Path=/; Expires=Wed, 17 Apr 2024 05:44:02 GMT; Max-Age=7200
X-Firefox-Spdy: h2

www.aramex.com//Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css

23.36.79.34

200 OK

195 kB

URL GET HTTP/2
www.aramex.com//Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css
IP
23.36.79.34:443
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
ASCII text, with very long lines (60668), with CRLF line terminators
Size
195 kB (194680 bytes)
Hash
afc39ee9f9a321af741e3134580c3c8e
1907774f136688d3667cea598e392d4be683f0a7
6be838bafd3135d494ed98852192c59a44889a253cc3e21ddaa0e8cdd3e9727e

HTTP Headers

GET //Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 07 Mar 2024 07:44:34 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
ntcoent-length: 738022
content-encoding: gzip
content-length: 194680
cache-control: public, max-age=604762
date: Wed, 17 Apr 2024 03:44:02 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=369, origin; dur=0, dtSInfo;desc="1", ak_p; desc="1713325442299_388255518_208042078_36764_6164_7_21_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Miss from child, HitStale from parent
akamai-grn: 0.1e4f2417.1713325442.c66785e
X-Firefox-Spdy: h2

bhilainagarnigam.com/support/www.aramex.com/0x3.js

172.67.184.218

200 OK

88 kB

URL GET HTTP/1.1
bhilainagarnigam.com/support/www.aramex.com/0x3.js
IP
172.67.184.218:80
ASN
#13335 CLOUDFLARENET

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/

File type
JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Size
88 kB (87495 bytes)
Hash
4fcf018b5c604c47ae980185cf0167c2
fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61
32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a

HTTP Headers

GET /support/www.aramex.com/0x3.js HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/support/www.aramex.com/
Cookie: PHPSESSID=q323o1nvfnvfc82t47f94u0u36
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 17 Apr 2024 03:44:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Last-Modified: Sat, 20 May 2023 13:38:46 GMT
ETag: "aec09a66208bd91:0"
Vary: Accept-Encoding
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oy43CpY1DAgItVyyOVDChd6WrfYUC90OTookGecUTJ8pOxaKosU3C9GCuatczgWGiS%2B%2FBIMbOe9ZluUoDjuPfSCeugEsN3CA7O6Umr%2F8s%2FBjniTVx9o0CGVW9MdotMaYwXkgUJCF8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87596a0d4d9556a5-OSL
alt-svc: h2=":443"; ma=60

www.aramex.com/Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf

23.36.79.34

200 OK

25 kB

URL GET HTTP/2
www.aramex.com/Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf
IP
23.36.79.34:443
ASN
#20940 Akamai International B.V.

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 29 names, Microsoft, language 0x409, Copyright 2021 The Red Hat Project Authors (https://github.com/RedHatOfficial/RedHatFont)Red Hat
Size
25 kB (25163 bytes)
Hash
13f0b054188ddccddeb6eba96b084c38
c08763f5d3fdc358aa838350fa9a63140087f22f
27e0a991b5ef1151cd4b6cc5afbeacf29b51300249fdbfe005a7ae6f4d05e2de

HTTP Headers

GET /Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://bhilainagarnigam.com
DNT: 1
Connection: keep-alive
Referer: https://www.aramex.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Thu, 21 Mar 2024 11:09:00 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
cteonnt-length: 46944
content-encoding: gzip
content-length: 25163
cache-control: public, max-age=1778369
date: Wed, 17 Apr 2024 03:44:03 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713325443046_388255518_208042617_57_6293_0_0_31";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.1e4f2417.1713325443.c667a79
X-Firefox-Spdy: h2

bhilainagarnigam.com/favicon.ico

172.67.184.218

404 Not Found

651 B

URL GET HTTP/1.1
bhilainagarnigam.com/favicon.ico
IP
172.67.184.218:80
ASN
#13335 CLOUDFLARENET

Requested by
http://bhilainagarnigam.com/support/www.aramex.com/

File type
HTML document, ASCII text, with CRLF line terminators
Size
651 B (651 bytes)
Hash
978f5bded3073d7cd566e6f80257d95c
d298bf35ed5cb5348bcbce1d399bf60c35026be2
a2acb94000b82db8ade09b0548ca8652e3ed1c0865cd3cd279437016a46f8d3a

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bhilainagarnigam.com/support/www.aramex.com/
Cookie: PHPSESSID=q323o1nvfnvfc82t47f94u0u36
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 17 Apr 2024 03:44:03 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YEZRpa4RkjV%2B8Fq7D2kpyz2MWPzp29huTB3lbi%2FBFDM2Hat7LrSXKjOUl5kXmLzJfQqqnj3yICvJaZpLlacscQC1vlvjxEspMuzVnbdLEFC1vunOkGxcZqJMjvY%2B14mABc3V3sYvxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87596a132ff956a5-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash