Report - etisalat-amazonprime.com/

Report Overview

Submitted URL
etisalat-amazonprime.com/
IP
23.97.224.11
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-25 08:04:28
Access
public
Website Title
Amazon prime | Etisalat UAE
Final URL
etisalat-amazonprime.com/amazon/ae/etisalat/en/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
etisalat-amazonprime.com	unknown	2020-10-07	2021-09-28	2023-09-30	5.1 kB	324 kB	23.97.224.11
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-25	891 B	181 kB	142.250.74.168
www.google.no	25607	2001-02-26	2016-04-05	2024-04-24	599 B	578 B	142.250.74.163
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-04-23	1.6 kB	890 B	216.239.34.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat
2024-03-28	medium	etisalat-amazonprime.com/	Etisalat

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	etisalat-amazonprime.com/amazon/ae/etisalat/en/?	1.3 kB	2023-03-07	2024-04-25
Pretty URL etisalat-amazonprime.com/amazon/ae/etisalat/en/? IP 23.97.224.11 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:34:51 Last Seen2024-04-25 10:04:28 Times Seen12 Hash 1f47223ae1f6729f4e786111c7cb6a7c 8ba0a3dff39d2da431adabe35134114ee3e784f0 98c979fe50e784d1fdd07d7457535ccd58faea9c2e23de7b01d6b87e513b3e63 Loading...

	etisalat-amazonprime.com/amazon/ae/etisalat/en/?	397 B	2023-03-07	2024-04-25
Pretty URL etisalat-amazonprime.com/amazon/ae/etisalat/en/? IP 23.97.224.11 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:34:51 Last Seen2024-04-25 10:04:28 Times Seen12 Hash 23bde48262a3ffec01618c78e6a6d7d3 96f87c05729e7a4cb3fb1158a13b5d4b5813127a ef2db0091d236fd57978a39f8aadcf8d4d5ce92f954e5eed327fbd322864a08f Loading...

	www.googletagmanager.com/gtm.js?id=GTM-5N56XQ8	242 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-5N56XQ8 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 10:04:28 Last Seen2024-04-25 10:04:29 Times Seen2 Hash 32c81a95dc6d90a20401031a064c4ec2 8bb17bf8c4a13cc8cc12522045e9225ca63e65da b7507b3f7985c2c2011383cf7274155a60cdd8185ec4e9cbc60aa7483bec9424 Loading...

	www.googletagmanager.com/gtag/js?id=G-E2HPJC69VC&l=dataLayer&cx=c	270 kB	2024-04-25	2024-04-25
Pretty URL www.googletagmanager.com/gtag/js?id=G-E2HPJC69VC&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 10:04:28 Last Seen2024-04-25 10:04:29 Times Seen2 Hash 542e0ce79b9b7eb7d406668fb52cde50 8282ddaf38a0c63c9ab6ad2309df37d6bf7014f3 225d3485f5eda6ada1d7a91e60cf30cb3344979cf982a2422f3cb828ac56de6e Loading...

	etisalat-amazonprime.com/amazon/ae/etisalat/en/?	125 kB	2023-04-10	2024-04-25
Pretty URL etisalat-amazonprime.com/amazon/ae/etisalat/en/? IP 23.97.224.11 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-10 21:24:24 Last Seen2024-04-25 10:04:29 Times Seen11 Hash 556f10a447b613d38a0b724a02859b43 16b4819d29d86e0d1ce4260cc6f51b3d878fac3b 7abffa8b8c416ed72ffddaab6ef056d083c6ad8c947cea7cb20d8f075b60875f Loading...

	etisalat-amazonprime.com/amazon/ae/etisalat/en/?	42 B	2023-03-07	2024-04-25
Pretty URL etisalat-amazonprime.com/amazon/ae/etisalat/en/? IP 23.97.224.11 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:34:51 Last Seen2024-04-25 10:04:29 Times Seen12 Hash 24d93bea4536254cb10b7fc1a988a106 a0c6b8460d6ad1fb73cf3b41284dd177695fe786 40f252aaf4acf2e6851da144a9bf3d8cad60e81915de039df5a8ee2f4e04d5b3 Loading...

HTTP Transactions (15)

URL IP Response Size

etisalat-amazonprime.com/

23.97.224.11

302 Moved Temporarily

3 B

URL User Request GET HTTP/1.1
etisalat-amazonprime.com/
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
3 B (3 bytes)
Hash
ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET / HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Content-Length: 3
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 08:04:01 GMT
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Location: https://etisalat-amazonprime.com/amazon/ae/etisalat/
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/

23.97.224.11

302 Moved Temporarily

0 B

URL User Request GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/ HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 08:04:02 GMT
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Location: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
X-Powered-By: PHP/5.6.40
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/en/?

23.97.224.11

200 OK

74 kB

URL User Request GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/en/?
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (63792)
Size
74 kB (74274 bytes)
Hash
7052bc3454193b579a84314f296102aa
22398a46998b9dac4665296512d3edfa05e20316
b412571fb15ce9acfccfa9ac894f7754baa3cf2800944160611139f5c0e2b99b

HTTP Headers

GET /amazon/ae/etisalat/en/? HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 08:04:01 GMT
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/hero-mobile-en.jpg

23.97.224.11

200 OK

43 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/hero-mobile-en.jpg
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 414x200, components 3
Size
43 kB (42870 bytes)
Hash
a917f42e9bd291dafa53fa0b0389b674
590ff5bbc0a3bb389db1ee9b16812b51525dbf1d
60250cfa196950ca7875aac089634f184a4962dfabe7e8e1d70b53584ff293ff

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/img/hero-mobile-en.jpg HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 42870
Content-Type: image/jpeg
Date: Thu, 25 Apr 2024 08:04:02 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "b1242971918d81:0"
Last-Modified: Wed, 02 Feb 2022 09:45:19 GMT
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/amazon-prime-logo.png

23.97.224.11

200 OK

32 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/amazon-prime-logo.png
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
PNG image data, 1352 x 261, 8-bit colormap, non-interlaced
Size
32 kB (32406 bytes)
Hash
29dcf8284ecf67046cfda25e58288802
1fc40706214843ad48741f81a19fd250fac5b35d
3975d8108588ef0c5549a1425cfa451a16f3f2901d879047c11428180fe8865c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/img/amazon-prime-logo.png HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 32406
Content-Type: image/png
Date: Thu, 25 Apr 2024 08:04:01 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "37fe9a3139d71:0"
Last-Modified: Sat, 24 Apr 2021 17:41:21 GMT
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/fonts/Lato-Regular.ttf

23.97.224.11

200 OK

75 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/fonts/Lato-Regular.ttf
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GPOS", 15 names, Microsoft, language 0x409, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name "Lato". Licensed und
Size
75 kB (75136 bytes)
Hash
2d36b1a925432bae7f3c53a340868c6e
83dc5921761a7c3d1ee7badba3fc7e1e1f5ed803
ea8979c22cf1d830e3ff939aadd49cc4d78c851e3cb59d2aa95ea10ee752d5d1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/fonts/Lato-Regular.ttf HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 75136
Content-Type: application/octet-stream
Date: Thu, 25 Apr 2024 08:04:02 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "b9297993139d71:0"
Last-Modified: Sat, 24 Apr 2021 17:41:20 GMT
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/partner-logo.png

23.97.224.11

200 OK

5.1 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/partner-logo.png
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
PNG image data, 424 x 107, 8-bit colormap, non-interlaced
Size
5.1 kB (5130 bytes)
Hash
624f026c4cd57d5e4675a988764acea4
3cb8f8f86959d9924c46a147c9a0979c126914d6
de481fc38e51005b23b76b140e7670b805681f68dc54f691d96969c9d4263d49

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/img/partner-logo.png HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 5130
Content-Type: image/png
Date: Thu, 25 Apr 2024 08:04:02 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "801fe2b39167d91:0"
Last-Modified: Wed, 05 Apr 2023 07:39:07 GMT
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/fonts/NeoTech.otf

23.97.224.11

200 OK

15 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/fonts/NeoTech.otf
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
OpenType font data
Size
15 kB (15060 bytes)
Hash
aa5fb512908e7e57cb8b83002357b361
65be038c6e0c87db17a8e022e6f67c7ba17a76bd
1512799a8cadb48a11eb2f9a244ca77234898d80e4dcefce0972dc2fece853ba

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/fonts/NeoTech.otf HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 15060
Content-Type: font/otf
Date: Thu, 25 Apr 2024 08:04:01 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "8f4c5293139d71:0"
Last-Modified: Sat, 24 Apr 2021 17:41:20 GMT
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtm.js?id=GTM-5N56XQ8

142.250.74.168

200 OK

86 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-5N56XQ8
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (3108)
Size
86 kB (85614 bytes)
Hash
32c81a95dc6d90a20401031a064c4ec2
8bb17bf8c4a13cc8cc12522045e9225ca63e65da
b7507b3f7985c2c2011383cf7274155a60cdd8185ec4e9cbc60aa7483bec9424

HTTP Headers

GET /gtm.js?id=GTM-5N56XQ8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 08:04:02 GMT
expires: Thu, 25 Apr 2024 08:04:02 GMT
cache-control: private, max-age=900
last-modified: Thu, 25 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85614
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/hero-desktop-en.jpg

23.97.224.11

200 OK

64 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/hero-desktop-en.jpg
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x364, components 3
Size
64 kB (63704 bytes)
Hash
f5ec5334c425491c238df11a7c1a71e7
49667a4deea706dda2619b63622a68a432650b36
b1e16f6503952778d112eba3b3d2a6f5f65b2fe5e4e8a5ca7b076fdc0662adfb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/img/hero-desktop-en.jpg HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 63704
Content-Type: image/jpeg
Date: Thu, 25 Apr 2024 08:04:02 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "ff4ac4fbd318d81:0"
Last-Modified: Thu, 03 Feb 2022 07:59:34 GMT
X-Frame-Options: SAMEORIGIN

etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/favicon.ico

23.97.224.11

200 OK

11 kB

URL GET HTTP/1.1
etisalat-amazonprime.com/amazon/ae/etisalat/assets/img/favicon.ico
IP
23.97.224.11:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerDigiCert, Inc.
Subjectetisalat-amazonprime.com
Fingerprint32:94:5F:8A:10:97:98:C4:B9:8A:B7:40:C7:9A:62:7B:E7:A1:F3:02
ValidityMon, 15 Apr 2024 00:00:00 GMT - Tue, 15 Oct 2024 23:59:59 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 48x48, 32 bits/pixel
Size
11 kB (10806 bytes)
Hash
6d5757fc19a5ec311447e1c0c3e3282f
3c12e79edb6c60f3b908b1980397cc96803d39d8
3db25f41b5ca060886d081c1ba8946a2c830651bf02b20878dfdd8947dd89078

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Etisalat

HTTP Headers

GET /amazon/ae/etisalat/assets/img/favicon.ico HTTP/1.1
Host: etisalat-amazonprime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 10806
Content-Type: image/x-icon
Date: Thu, 25 Apr 2024 08:04:02 GMT
Accept-Ranges: bytes
Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With
Access-Control-Allow-Methods: GET, PUT, POST
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
ETag: "d3bc31a3139d71:0"
Last-Modified: Sat, 24 Apr 2021 17:41:21 GMT
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=G-E2HPJC69VC&l=dataLayer&cx=c

142.250.74.168

200 OK

94 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-E2HPJC69VC&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type
JavaScript source, ASCII text, with very long lines (3034)
Size
94 kB (93789 bytes)
Hash
542e0ce79b9b7eb7d406668fb52cde50
8282ddaf38a0c63c9ab6ad2309df37d6bf7014f3
225d3485f5eda6ada1d7a91e60cf30cb3344979cf982a2422f3cb828ac56de6e

HTTP Headers

GET /gtag/js?id=G-E2HPJC69VC&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 08:04:02 GMT
expires: Thu, 25 Apr 2024 08:04:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93789
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-E2HPJC69VC&cid=984472386.1714032243&gtm=45je44o0v878954417z8837664272za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1556812798

142.250.74.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-E2HPJC69VC&cid=984472386.1714032243&gtm=45je44o0v878954417z8837664272za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1556812798
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D
ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-E2HPJC69VC&cid=984472386.1714032243&gtm=45je44o0v878954417z8837664272za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1556812798 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 08:04:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417z8837664272za200&_p=1714032242498&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1041

216.239.34.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417z8837664272za200&_p=1714032242498&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1041
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417z8837664272za200&_p=1714032242498&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1041 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etisalat-amazonprime.com
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://etisalat-amazonprime.com
date: Thu, 25 Apr 2024 08:04:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417za200&_p=1714032242498&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=scroll&epn.percent_scrolled=90&tfd=6054

216.239.34.36

204 No Content

0 B

URL POST HTTP/3
region1.analytics.google.com/g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417za200&_p=1714032242498&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=scroll&epn.percent_scrolled=90&tfd=6054
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://etisalat-amazonprime.com/amazon/ae/etisalat/en/?
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-E2HPJC69VC&gtm=45je44o0v878954417za200&_p=1714032242498&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=984472386.1714032243&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714032242&sct=1&seg=0&dl=https%3A%2F%2Fetisalat-amazonprime.com%2Famazon%2Fae%2Fetisalat%2Fen%2F&dt=Amazon%20prime%20%7C%20Etisalat%20UAE&en=scroll&epn.percent_scrolled=90&tfd=6054 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etisalat-amazonprime.com
DNT: 1
Connection: keep-alive
Referer: https://etisalat-amazonprime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/3 204 No Content
access-control-allow-origin: https://etisalat-amazonprime.com
date: Thu, 25 Apr 2024 08:04:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP