Report - bhilainagarnigam.com/support/www.aramex.com/

Report Overview

Submitted URL
bhilainagarnigam.com/support/www.aramex.com/
IP
104.21.72.129
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 05:19:31
Access
public
Website Title
Express Services
Final URL
bhilainagarnigam.com/support/www.aramex.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.aramex.com	81273	1995-11-25	2012-07-21	2024-04-16	3.2 kB	248 kB	95.100.155.123
bhilainagarnigam.com	unknown	2005-10-18	2014-01-16	2024-04-17	1.5 kB	116 kB	172.67.184.218

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	bhilainagarnigam.com/support/www.aramex.com/	Aramex

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	bhilainagarnigam.com/support/www.aramex.com/0x3.js	88 kB	2023-06-05	2024-04-29
Pretty URL bhilainagarnigam.com/support/www.aramex.com/0x3.js IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-05 16:56:04 Last Seen2024-04-29 19:38:10 Times Seen1027 Hash 4fcf018b5c604c47ae980185cf0167c2 fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61 32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a Loading...

	bhilainagarnigam.com/support/www.aramex.com/	367 B	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 45d16e96f5a0f6f6107bed902560a6ea 723bdc831cccdc407c4dc5b5d7727d0ce94abf44 a739b2c68a52c767bf10558f987020ec9a4efd574c9e17c1dea57729ac196dfd Loading...

	bhilainagarnigam.com/support/www.aramex.com/	1.4 kB	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 653be3f4fd7777d3735ae147d2c85cee d4f46bd8dc1a2f78b6175241badc634caf82d098 d3bce899761961cbcccf827562c4243a59fd852da30d7d4fb94b28c3f37dbb68 Loading...

	bhilainagarnigam.com/support/www.aramex.com/	1.2 kB	2023-12-17	2024-04-17
Pretty URL bhilainagarnigam.com/support/www.aramex.com/ IP 172.67.184.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-17 16:46:32 Last Seen2024-04-17 07:19:32 Times Seen9 Hash 7526cf128a6c9b90f3766d2e12ed306d 33e486b9ac16b3c082cb51fc179ab7563b713c01 d3b0760fb3da5242fd993846bec83de9705e2079d54a77b8b0c5f85493ee724d Loading...

HTTP Transactions (9)

URL IP Response Size

www.aramex.com/docs/default-source/site-assets/aramex-logo.svg

95.100.155.123

200 OK

2.3 kB

URL GET HTTP/2
www.aramex.com/docs/default-source/site-assets/aramex-logo.svg
IP
95.100.155.123:443
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2274 bytes)
Hash
f484b593c2387746a054f521e313ec93
8448e96f9e03ed3a82de4ac698f1fe78e37ff638
e0447aa04943d0d047baf922ce6f286da4e50d62113aa19505f75705a9a46773

HTTP Headers

GET /docs/default-source/site-assets/aramex-logo.svg HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
pragma: no-cache
ntcoent-length: 7280
content-type: image/svg+xml
content-security-policy: default-src 'self' dotcomaramexprod.blob.core.windows.net ;script-src https://assets.what3words.com/ https://assets.what3words.com/ https://cdn-cookieyes.com/ https://static.ads-twitter.com/uwt.js https://prod-live-chat.sprinklr.com/ https://live-chat-static.sprinklr.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://ajax.aspnetcdn.com/ https://unpkg.com/ www.youtube.com https://consentcdn.cookiebot.com/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com  http://cdn.pardot.com/ https://info.aramex.com/ https://pi.pardot.com/ https://snap.licdn.com/ https://connect.facebook.net/ https://www.googleadservices.com/  aramex.api.sociaplus.com https://npmcdn.com https://app.powerbi.com https://v1.addthisedge.com https://reverse.geocoder.cit.api.here.com dotcomaramexdev.blob.core.windows.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval' https://m.addthisedge.com http://js.api.here.com https://code.jquery.com *.facebook.com *.addthis.com  www.googletagmanager.com api.sociaplus.com js.cit.api.here.com www.google-analytics.com cdnjs.cloudflare.com tools.euroland.com aramex.api.sociaplus.com 1.pano.maps.cit.api.here.com locationv2.api.sociaplus.com 1.base.maps.cit.api.here.com 1.aerial.maps.cit.api.here.com 1.traffic.maps.cit.api.here.com 1.base.maps.cit.api.here.com route.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://static.ads-twitter.com/uwt.js ;style-src 'self' js.api.here.com fonts.googleapis.com js.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ http://js.api.here.com aramex.api.sociaplus.com tagmanager.google.com www.gstatic.com cdnjs.cloudflare.com gamma.euroland.com tools.euroland.com 'unsafe-inline' https://cdn.jsdelivr.net/ https://td.doubleclick.net/ ;img-src * blob: data:;font-src 'self' fonts.gstatic.com https: data:; connect-src 'self' https: http:;form-action www.facebook.com 'self'  'unsafe-inline'https://tpay1.digitsecure.com/; frame-src https://recaptcha.google.com/recaptcha/ https://www.google.com/recaptcha/ dotcomaramexprod.blob.core.windows.net consentcdn.cookiebot.com www.facebook.com ' 'self' https://app.powerbi.com charts3.equitystory.com  https://app.powerbi.com charts3.equitystory.com  irpages2.equitystory.com charts25.equitystory.com qas4.equitystory.com gamma.euroland.com tools.euroland.com tools.eurolandir.com aramex.api.sociaplus.com api.sociaplus.com *.addthis.com www.youtube.com aramex-fior.typeform.com qas4.equitystory.com charts25.equitystory.com
referrer-policy: strict-origin-when-cross-origin
x-ua-compatible: IE=edge
content-disposition: inline; filename=aramex-logo.svg
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
content-encoding: gzip
content-length: 2274
cache-control: max-age=1682692
date: Wed, 17 Apr 2024 05:19:06 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713331146760_1600428919_39672544_37_7028_20_0_11";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.779b645f.1713331146.25d5ae0
X-Firefox-Spdy: h2

www.aramex.com/Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg

95.100.155.123

200 OK

8.4 kB

URL GET HTTP/2
www.aramex.com/Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg
IP
95.100.155.123:443
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
SVG Scalable Vector Graphics image
Size
8.4 kB (8444 bytes)
Hash
497d51c402f94c1c8568d642c745541d
f64623f9beaa3cffe12d06533d2dde5ac788f8e0
d237f4128b2589d9ece69a734db38a0d40918971670ea6be77117eb565d1b7e1

HTTP Headers

GET /Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/Images/svg/saudi-arabias-contactus.svg HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 07 Mar 2024 07:44:36 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
ntcoent-length: 18729
content-encoding: gzip
content-length: 8444
cache-control: public, max-age=1683208
date: Wed, 17 Apr 2024 05:19:06 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713331146768_1600428919_39672545_843_9714_19_0_11";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.779b645f.1713331146.25d5ae1
X-Firefox-Spdy: h2

www.aramex.com//Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css

95.100.155.123

200 OK

197 kB

URL GET HTTP/2
www.aramex.com//Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css
IP
95.100.155.123:443
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
ASCII text, with very long lines (60668), with CRLF line terminators
Size
197 kB (196907 bytes)
Hash
afc39ee9f9a321af741e3134580c3c8e
1907774f136688d3667cea598e392d4be683f0a7
6be838bafd3135d494ed98852192c59a44889a253cc3e21ddaa0e8cdd3e9727e

HTTP Headers

GET //Sitefinity/WebsiteTemplates/aramex/App_Themes/aramex/global/project.css HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 21 Mar 2024 11:08:50 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
cteonnt-length: 738022
content-encoding: gzip
content-length: 196907
cache-control: public, max-age=570767
date: Wed, 17 Apr 2024 05:19:06 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=10, origin; dur=0, ak_p; desc="1713331146763_1600428919_39672547_1032_6485_19_0_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Miss from child, Hit from parent
akamai-grn: 0.779b645f.1713331146.25d5ae3
X-Firefox-Spdy: h2

www.aramex.com//WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000

95.100.155.123

215 B

URL GET
www.aramex.com//WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000
IP
95.100.155.123:0
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
215 B (215 bytes)
Hash
a25e84390074a88513b0c39d19a3fc04
caf00fce9d023c9f59a8e63a431402a17d6f7c48
94d238e998c9c4f12ce9103672f34b945a8f41d7ffb5ce37d1d56e813339386c

HTTP Headers

GET //WebResource.axd?d=HTT0uhWDKt5ZO8mq_kUmdzMxSWSAHijbcMkq0aZuNfVp5C9pCfd8HEhHJOW2fyVyjcqIcZFZO9S2uAI9Am9U2Vdg-WCh9_eEQXK0f8LM0SD7r4PEg-Qov0MNRppO2-gpTyjWxhKjbADudSJDXbgXkx1RKriZjjs8cYQ8YRus9n42WRHO0&t=638161948480000000 HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=a624b4953beb4fffa921f309678b670b
content-security-policy: default-src 'self' dotcomaramexprod.blob.core.windows.net ;script-src https://assets.what3words.com/ https://assets.what3words.com/ https://cdn-cookieyes.com/ https://static.ads-twitter.com/uwt.js https://prod-live-chat.sprinklr.com/ https://live-chat-static.sprinklr.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://spx-components.cdn.sprinklr.com/ https://static.ads-twitter.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://ajax.aspnetcdn.com/ https://unpkg.com/ www.youtube.com https://consentcdn.cookiebot.com/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com  http://cdn.pardot.com/ https://info.aramex.com/ https://pi.pardot.com/ https://snap.licdn.com/ https://connect.facebook.net/ https://www.googleadservices.com/  aramex.api.sociaplus.com https://npmcdn.com https://app.powerbi.com https://v1.addthisedge.com https://reverse.geocoder.cit.api.here.com dotcomaramexdev.blob.core.windows.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval' https://m.addthisedge.com http://js.api.here.com https://code.jquery.com *.facebook.com *.addthis.com  www.googletagmanager.com api.sociaplus.com js.cit.api.here.com www.google-analytics.com cdnjs.cloudflare.com tools.euroland.com aramex.api.sociaplus.com 1.pano.maps.cit.api.here.com locationv2.api.sociaplus.com 1.base.maps.cit.api.here.com 1.aerial.maps.cit.api.here.com 1.traffic.maps.cit.api.here.com 1.base.maps.cit.api.here.com route.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://static.ads-twitter.com/uwt.js ;style-src 'self' js.api.here.com fonts.googleapis.com js.cit.api.here.com https://cdnjs.cloudflare.com/ https://cdnjs.cloudflare.com/ http://js.api.here.com aramex.api.sociaplus.com tagmanager.google.com www.gstatic.com cdnjs.cloudflare.com gamma.euroland.com tools.euroland.com 'unsafe-inline' https://cdn.jsdelivr.net/ https://td.doubleclick.net/ ;img-src * blob: data:;font-src 'self' fonts.gstatic.com https: data:; connect-src 'self' https: http:;form-action www.facebook.com 'self'  'unsafe-inline'https://tpay1.digitsecure.com/; frame-src https://recaptcha.google.com/recaptcha/ https://www.google.com/recaptcha/ dotcomaramexprod.blob.core.windows.net consentcdn.cookiebot.com www.facebook.com ' 'self' https://app.powerbi.com charts3.equitystory.com  https://app.powerbi.com charts3.equitystory.com  irpages2.equitystory.com charts25.equitystory.com qas4.equitystory.com gamma.euroland.com tools.euroland.com tools.eurolandir.com aramex.api.sociaplus.com api.sociaplus.com *.addthis.com www.youtube.com aramex-fior.typeform.com qas4.equitystory.com charts25.equitystory.com
referrer-policy: strict-origin-when-cross-origin
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
content-length: 215
expires: Wed, 17 Apr 2024 05:19:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 17 Apr 2024 05:19:06 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=40, origin; dur=129, ak_p; desc="1713331146736_1600428919_39672543_16995_7102_25_23_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: NotCacheable from child
akamai-grn: 0.779b645f.1713331146.25d5adf
set-cookie: ak_bmsc=87DAFF35F9EAF1C8840E242C7BB844FF~000000000000000000000000000000~YAAQd5tkX4ILSOeOAQAAuZB+6hcTpSY52SgN5q3+O05w2V7MB6U39+Nq5Yzzixy0bsYJyWRnclZwWZQAZw7hYvZ8gJIcuyyiVyLKnSXHh40tUStGLErXWCsr/STqgwT8swSqb/wLlwR/RNmNyp6mzPqq0sE/lPp0rVPjzgur2BW2Gt443njxBVigExi10erOT5L3f+h2bz/willtUFrGcMDEUlosRQ4b6pMobYi45l+puWdpQYr29ebFN1niKF9sFfZngTLx9jBcMO74epoKZTQxmKW0ei39gk1saEFptoYJAy8RenUCVTPJWCs6FWShJFpN3mF9mtNM6RgH4w6poomhKeBs4rBDnpk/cb8fammHpvhvnQZjrzSCFXXormbc6BeSmkBcEB9D; Domain=.aramex.com; Path=/; Expires=Wed, 17 Apr 2024 07:19:06 GMT; Max-Age=7200
X-Firefox-Spdy: h2

www.aramex.com/Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=a624b4953beb4fffa921f309678b670b

95.100.155.123

4.9 kB

URL GET
www.aramex.com/Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=a624b4953beb4fffa921f309678b670b
IP
95.100.155.123:0
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4272), with CRLF, LF line terminators
Size
4.9 kB (4887 bytes)
Hash
31ba3613c192af9fa3ae4f14ed9332d0
a12ccf73ccda3432b88ea01d061ab2be64d0ce08
5e9d9929d86a2d4945a2adb3ba76548ed814bf99a59e17a73e2416a15a6a5797

HTTP Headers

GET /Sitefinity/WebsiteTemplates/aramex/errorPages/500.html?reference=a624b4953beb4fffa921f309678b670b HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bhilainagarnigam.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
last-modified: Thu, 21 Mar 2024 11:08:58 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
ntcoent-length: 6556
x-akamai-transformed: 9 2849 0 pmb=mRUM,1
content-encoding: gzip
expires: Wed, 17 Apr 2024 05:19:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 17 Apr 2024 05:19:07 GMT
content-length: 4887
vary: Accept-Encoding
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=90, ak_p; desc="1713331146964_1600428919_39672638_10948_7369_23_0_21";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: NotCacheable from child
akamai-grn: 0.779b645f.1713331146.25d5b3e
set-cookie: ak_bmsc=5E917887D72AA10255698DBAD7CF9E49~000000000000000000000000000000~YAAQd5tkX4MLSOeOAQAASZF+6he7j+sEQgVMXSGXtNfnOmyYiaHlXLwVlIUwmFympoEKe4zJ53ZwSVGJDmwjO2nufhwASe8SiKSgXeMT8gUyAT3oLDtHBug41yE+EhPSyXJg4RYM9ks9QGx43VgIt0vauMZISF61A4QyuuvkAHQBUNk3NBLsMw9oW0S3c3vl8d41T1urvoz1HkPcdVrNAknQqP+ycUqWySERXNr1ava1RCXZt4yCV0h8BZyoMFPCBkdBlX6S+mLCAtl/0+zhRI94BifSJTMTiu2PRFJl1hgTndn7u52klBrnFnSbamy9Ez7acjQamlm3Upsi3K7whuZkDAnpzncHVItkqio/Lwtyx/hbknHugNnQFyioFsg8kKbQZyzetRnX; Domain=.aramex.com; Path=/; Expires=Wed, 17 Apr 2024 07:19:06 GMT; Max-Age=7199
X-Firefox-Spdy: h2

www.aramex.com/Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf

95.100.155.123

200 OK

25 kB

URL GET HTTP/2
www.aramex.com/Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf
IP
95.100.155.123:443
ASN
#20940 Akamai International B.V.

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerLet's Encrypt
Subjectwww.aramex.com
FingerprintB4:A0:E8:31:D5:5F:62:69:31:BB:55:2E:09:96:24:7C:FD:A7:F6:6A
ValidityTue, 05 Mar 2024 04:05:16 GMT - Mon, 03 Jun 2024 04:05:15 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 29 names, Microsoft, language 0x409, Copyright 2021 The Red Hat Project Authors (https://github.com/RedHatOfficial/RedHatFont)Red Hat
Size
25 kB (25163 bytes)
Hash
13f0b054188ddccddeb6eba96b084c38
c08763f5d3fdc358aa838350fa9a63140087f22f
27e0a991b5ef1151cd4b6cc5afbeacf29b51300249fdbfe005a7ae6f4d05e2de

HTTP Headers

GET /Sitefinity/WebsiteTemplates/Global_them/fonts/RedHatDisplay/RedHatDisplay-Light.ttf HTTP/1.1
Host: www.aramex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bhilainagarnigam.com
DNT: 1
Connection: keep-alive
Referer: https://www.aramex.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Thu, 07 Mar 2024 17:44:40 GMT
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
ntcoent-length: 46944
content-encoding: gzip
content-length: 25163
cache-control: public, max-age=1683437
date: Wed, 17 Apr 2024 05:19:07 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713331147237_1600428919_39672769_29_7424_26_0_31";dur=1
strict-transport-security: max-age=86400
akamai-cache-status: Hit from child
akamai-grn: 0.779b645f.1713331147.25d5bc1
X-Firefox-Spdy: h2

bhilainagarnigam.com/support/www.aramex.com/0x3.js

172.67.184.218

200 OK

36 kB

URL GET HTTP/3
bhilainagarnigam.com/support/www.aramex.com/0x3.js
IP
172.67.184.218:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectbhilainagarnigam.com
FingerprintA7:32:FA:09:B9:A5:94:98:96:68:94:B1:AC:F5:A8:CB:71:A5:80:0F
ValiditySat, 16 Mar 2024 23:22:15 GMT - Fri, 14 Jun 2024 23:22:14 GMT

File type
JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Size
36 kB (35666 bytes)
Hash
4fcf018b5c604c47ae980185cf0167c2
fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61
32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a

HTTP Headers

GET /support/www.aramex.com/0x3.js HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/support/www.aramex.com/
Cookie: PHPSESSID=vbsddl6uc0ccjm43agcr2734ct
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 17 Apr 2024 05:19:06 GMT
content-type: application/javascript
last-modified: Sat, 20 May 2023 13:38:46 GMT
etag: W/"aec09a66208bd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LXyvtg%2B4x7JGedUGmZk%2BxZSHmTiHy7JqlXaWTgTuA1ijWtsX3cywPYSbmqXgzB1g%2BxTrCI5GSirfoNHF02XnGcu7xQtQxFfvcNdqm5F9uHU3xxT473GRftJbw0eh1HWJNt2MXCenmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8759f55219c492fd-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

bhilainagarnigam.com/support/www.aramex.com/

172.67.184.218

200 OK

77 kB

URL User Request GET HTTP/2
bhilainagarnigam.com/support/www.aramex.com/
IP
172.67.184.218:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectbhilainagarnigam.com
FingerprintA7:32:FA:09:B9:A5:94:98:96:68:94:B1:AC:F5:A8:CB:71:A5:80:0F
ValiditySat, 16 Mar 2024 23:22:15 GMT - Fri, 14 Jun 2024 23:22:14 GMT

File type

Size
77 kB (77060 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Aramex

HTTP Headers

GET /support/www.aramex.com/ HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:19:06 GMT
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
expires: Thu, 19 Nov 1981 08:52:00 GMT
vary: Accept-Encoding
set-cookie: PHPSESSID=vbsddl6uc0ccjm43agcr2734ct; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2F1r6DGlR7kDcnPWGLF4QmKpSkLyyjNv2VmDoFknCiZ9F0NiIWlPBvTQz03XC1Fs0uDuE%2FHaAgqfcfbtPgf6EQXv%2BHw14pVlvQ%2Bk7m8uxv8QhFYhh%2BSKgX8S8yWqdAYdUePuPxFiAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8759f54e6b80abe6-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bhilainagarnigam.com/favicon.ico

172.67.184.218

404 Not Found

1.1 kB

URL GET HTTP/3
bhilainagarnigam.com/favicon.ico
IP
172.67.184.218:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bhilainagarnigam.com/support/www.aramex.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectbhilainagarnigam.com
FingerprintA7:32:FA:09:B9:A5:94:98:96:68:94:B1:AC:F5:A8:CB:71:A5:80:0F
ValiditySat, 16 Mar 2024 23:22:15 GMT - Fri, 14 Jun 2024 23:22:14 GMT

File type
HTML document, ASCII text, with very long lines (1219), with no line terminators
Size
1.1 kB (1145 bytes)
Hash
b6b7ade351eef4ef5657eec25f795d8a
bba541fe28275cfa6dbfc93e91084583e3caaf70
5538d1aa3e648d14b2fb503bd02855fdfd02fc19b362f389bf23c688a057fee2

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bhilainagarnigam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhilainagarnigam.com/support/www.aramex.com/
Cookie: PHPSESSID=vbsddl6uc0ccjm43agcr2734ct
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 05:19:07 GMT
content-type: text/html
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZO6gDB88inIi7JIhSBNajBAItnvgLG%2BVh8iaB1w2xyyjiFndbWVWDAiqCnKbNLtJil%2Fy1QGKaRAMJREte564cPdMeVaa%2FjXddsHFNbAZLZ%2F6qY9Tlzlhx9durViyJzcfdR4UPDyBmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8759f5568df192fd-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size