# arameatws.online Arabic tracking number entry page | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/arameatws.online/
Machine-readable companion: https://phishdestroy.io/domain/arameatws.online/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Unverified
- First observed by PhishDestroy: 2026-11-01 13:46:49 UTC
- Selected availability observation: 2026-11-02T11:53:23Z
- Stored record updated: 2026-11-02 17:01:23 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored labels and detections
- Automated brand label (collector metadata; not a confirmed impersonation finding): amex
## Stored infrastructure
- Observed IP address: 185.230.63.171
- Registrar in stored WHOIS data: HOSTINGER operations, UAB
- Registrar country in stored WHOIS data: LT
- Registration date in stored WHOIS data: 2026-10-19 13:41:09 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1975c-259f-76d9-a359-b0eb4afd5300/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/arameatws.online
- Certificate Transparency search: https://crt.sh/?q=%25.arameatws.online
- Web Archive lookup: https://web.archive.org/web/*/https://arameatws.online/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy describes arameatws.online, a page presenting an Arabic tracking-number entry field as its main interaction.
The captured page at arameatws.online presents a single Arabic-language form headed "تتبع شحنتك" (Track your shipment). Its only visible interaction is a required field labeled "رقم الشحنة" (tracking number) with the placeholder "ادخل الرقم" (enter the number), inviting a visitor to submit a shipment identifier. The page carries no visible company logo or additional content beyond this entry form, and the screenshot shows no other branding or navigation.
The stored VirusTotal domain result reports 0 detections out of 92 engines.
Package revision: 4499e489138c1e5ce9ab397e84bb4dd7f7a9158671e1db362deb6fdd6b83f50b
Text generated (not scan time): 2026-11-01 14:48:29
Reviewed evidence snapshot: {"domain":"arameatws.online","screenshot_available":true,"initial_ai_description":"The website impersonates a shipping tracking service, asking for a tracking number and offering a registration link, which is a common tactic for credential theft or other scams. The domain 'arameatws.online' is not the official domain for Aramex, a known shipping company, indicating brand impersonation.","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-25","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T13:47:19Z","final_host":"www.arameatws.online","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":573}
Source facts (timestamps as stored): {"record_id":1731196,"first_recorded_at":"2026-11-01 14:46:49","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-25T06:11:34Z","checked_at":null,"fetched_at":"2026-11-01T13:47:14Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-25 06:11:34","checked_at":"2026-11-01 14:47:14","fetched_at":"2026-11-01 13:47:15","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":54,"malicious":0,"suspicious":0,"undetected":38}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 18:01:23"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-01 16:30:16"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":1731196,"scope":"checked_url","observed_at":"2026-11-02T11:53:23Z","http_status":null,"http_observed_at":"2026-11-02T11:53:23Z","stored_http_code":0,"stored_http_observed_at":"2026-11-02T11:53:23Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unreachable","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- Stored capture: https://i.ibb.co/Rp6KHcft/c70b64c6343f.png
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/01a1975c-259f-76d9-a359-b0eb4afd5300.png
Captured: 2026-11-01 13:46:15 UTC
Source report: https://urlscan.io/result/01a1975c-259f-76d9-a359-b0eb4afd5300/
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a1975e-cab1-7455-b9ad-69646e25925d.png
Captured: 2026-11-01 13:49:01 UTC
Source report: https://urlscan.io/result/01a1975e-cab1-7455-b9ad-69646e25925d/
SHA-256: 5962ec792e7e1d39242cce9f07efe51540365ee425e9c06c8d8c126553da4b8d
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/31d48dc7-ca0e-4f23-9e88-8a4d0362e80c.png
Captured: 2026-11-01 13:47:19 UTC
Source report: https://radar.cloudflare.com/scan/31d48dc7-ca0e-4f23-9e88-8a4d0362e80c
SHA-256: 18c3c092201f5bdd000cb28500068cc0fb4753cf203bfd7f34f249da2767f429
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-01T13:47:45Z",
"uuid": "01a1975c-259f-76d9-a359-b0eb4afd5300",
"scanned_at": "2026-11-01T13:46:15Z",
"final_url": "https://www.arameatws.online/",
"status": 200,
"redirected": "parent-domain",
"redirects": [
{
"to": "https://arameatws.online/",
"from": "http://arameatws.online/",
"status": 307
},
{
"to": "https://www.arameatws.online/",
"from": "https://arameatws.online/",
"status": 301
}
],
"ip": "162.159.143.12",
"domains": [
"static.parastorage.com",
"frog.wix.com",
"siteassets.parastorage.com",
"panorama.wixapps.net",
"static.wixstatic.com",
"browser.sentry-cdn.com",
"arameatws.online"
],
"ips": [
"151.101.194.217",
"34.149.206.255",
"54.211.38.12",
"13.227.65.127",
"151.101.65.91",
"151.101.193.91",
"162.159.143.12",
"185.230.63.186"
],
"asns": [
"54113",
"396982",
"14618",
"16509",
"13335",
"58182"
],
"countries": [
"US"
],
"doc_hash": "af3bf3f10d8de93e6c0ee69bb7c2d0e6ead1b30c2fd056054f331f4bbcdd5a39",
"globals": [
"Object",
"Number",
"String",
"JSON",
"Reflect",
"decodeURI",
"decodeURIComponent",
"encodeURI",
"encodeURIComponent",
"XMLHttpRequestEventTarget",
"XMLHttpRequest",
"URL",
"TextEncoder",
"TextDecoder",
"EventTarget",
"viewerModel",
"initialTimestamps",
"thunderboltTag",
"thunderboltVersion",
"commonConfig",
"strictDefine",
"defineStrictObject",
"defineStrictMethod",
"__pageRevealPromise",
"s",
"bodyCacheable",
"fedops",
"webpackJsonp__wix_thunderbolt_app",
"fastdom",
"customElementNamespace",
"wixCustomElements",
"__imageClientApi__",
"Sentry",
"resolveExternalsRegistryPromise",
"resolveExternalsRegistryModule",
"externalsRegistry",
"ReactDOM",
"reactDOMReference",
"React",
"reactReference"
],
"cookies": [
"ssr-caching",
"server-session-bind",
"__cf_bm",
"XSRF-TOKEN",
"hs",
"svSession",
"bSession"
],
"storage_keys": [
"mpaSessionId",
"fedops.logger.sessionId"
],
"tls": {
"san": [
"arameatws.online",
"www.arameatws.online"
],
"cipher": "AES_128_GCM",
"issuer": "WR1",
"subject": "arameatws.online",
"protocol": "TLS 1.3",
"valid_to": "2027-01-17T15:18:17Z",
"valid_from": "2026-10-19T15:18:18Z"
},
"domain_age_days": 0,
"apex_age_days": 12,
"tls_age_days": 12,
"tls_valid_days": 89,
"requests": 158,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 98,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31556952",
"x-content-type-options": "nosniff",
"content-language": "en-US",
"link": "; rel=preconnect; crossorigin, ; rel=preconnect, ; rel=preconnect; crossorigin, 200000"
},
"dns": [
{
"name": "arameatws.online",
"type": "A",
"value": "185.230.63.186"
},
{
"name": "arameatws.online",
"type": "A",
"value": "185.230.63.107"
},
{
"name": "arameatws.online",
"type": "A",
"value": "185.230.63.171"
},
{
"name": "www.arameatws.online",
"type": "CNAME",
"value": "cdn3.wixdns.net"
},
{
"name": "www.arameatws.online",
"type": "CNAME",
"value": "cdn3.wixdns.net"
}
],
"dnssec_valid": false,
"ip": "127.0.1.1",
"whois": {
"registrar": "HOSTINGER operations, UAB",
"created": "2026-10-19T15:41:08Z",
"updated": "2026-10-24T15:41:59Z",
"expires": "2027-10-19T15:41:08Z",
"nameservers": [
"ns8.wixdns.net",
"ns9.wixdns.net"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-01T13:47:14Z",
"analysis_at": "2026-10-25T06:11:34Z",
"stats": {
"timeout": 0,
"harmless": 54,
"malicious": 0,
"suspicious": 0,
"undetected": 38
},
"reputation": 0,
"categories": {
"Forcepoint ThreatSeeker": "newly registered websites"
},
"first_seen": "2026-10-19T17:36:53Z",
"dns": [
{
"ttl": 21600,
"type": "NS",
"value": "ns9.wixdns.net"
},
{
"ttl": 3600,
"type": "A",
"value": "185.230.63.186"
},
{
"ttl": 3600,
"type": "A",
"value": "185.230.63.171"
},
{
"ttl": 3600,
"type": "SOA",
"rname": "support.wix.com",
"value": "ns8.wixdns.net"
},
{
"ttl": 3600,
"type": "A",
"value": "185.230.63.107"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns8.wixdns.net"
}
],
"dns_at": "2026-10-25T06:11:47Z",
"jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
"cert": {
"san": [
"arameatws.online",
"www.arameatws.online"
],
"issuer": "Google Trust Services / WR1",
"serial": "a79c7c69bb3c581813a095131cf47d64",
"sha256": "64122323fded724bda81c83d78d62e8c4bda531fd8f6d73ab01f6fd078a22184",
"subject": "arameatws.online",
"valid_to": "2027-01-17T15:18:17Z",
"valid_from": "2026-10-19T15:18:18Z"
},
"rdap": {
"status": [
"client transfer prohibited",
"add period"
],
"events": {
"registration": "2026-10-19T15:41:08Z",
"registrar expiration": "2027-10-19T15:41:08Z",
"last update of RDAP database": "2026-10-19T15:46:51Z"
},
"registrar": "HOSTINGER operations, UAB",
"registrar_iana_id": "1636"
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-01T13:48:08Z",
"mail_config": {
"spf_lookups": 0
},
"caa_records": {
"domain": "arameatws.online"
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-01T13:47:11Z",
"first": "2026-10-19T18:19:50Z",
"changes": 1,
"days_archived": 2,
"scans_per_day": 0.08,
"avg_page_bytes": 67935
},
"robots_txt": {
"agents": [
"*",
"AdsBot-Google-Mobile",
"AdsBot-Google",
"PetalBot",
"dotbot"
],
"present": true,
"sitemaps": [
"https://www.arameatws.online/sitemap.xml"
]
},
"social_tags": {
"ogUrl": "https://www.arameatws.online",
"title": "الرئيسية | نظام الدعم الوطني",
"ogType": "website",
"robots": "noindex",
"ogImage": "https://static.wixstatic.com/media/32545d_da5226c8491b423a85fc7bd706810132~mv2.jpg/v1/fill/w_547,h_365,al_c/32545d_da5226c8491b423a85fc7bd706810132~mv2.jpg",
"ogTitle": "تتبع الشحنات I Aramex",
"generator": "Wix.com Website Builder",
"ogSiteName": "Aramex I tws",
"twitterCard": "summary_large_image",
"canonicalUrl": "https://www.arameatws.online"
},
"trackers": {
"requests": 111,
"trackers": [
{
"name": "Wix",
"company": "Wix",
"country": "IL",
"category": "Hosting",
"requests": 103
},
{
"name": "Wix Panorama",
"company": "Wix",
"country": "IL",
"category": "Site Analytics",
"requests": 1
},
{
"name": "Sentry",
"company": "Sentry",
"country": "US",
"category": "Utilities",
"requests": 2
},
{
"name": "Wix Thunderbolt",
"company": "Wix",
"country": "IL",
"category": "Utilities",
"requests": 63
}
]
},
"mixed_content": {
"no_sri": [
"https://static.parastorage.com/services/wix-thunderbolt/dist/thunderbolt-commons.d5866f82.bundle.min.js",
"https://static.parastorage.com/services/wix-thunderbolt/dist/main.71f0d29e.bundle.min.js",
"https://static.parastorage.com/services/wix-thunderbolt/dist/main.renderer.b325a058.bundle.min.js",
"https://static.parastorage.com/services/wix-thunderbolt/dist/browser-deprecation.bundle.es5.js",
"https://static.parastorage.com/unpkg/core-js-bundle@3.2.1/minified.js",
"https://static.parastorage.com/unpkg/focus-within-polyfill@5.0.9/dist/focus-within-polyfill.js",
"https://static.parastorage.com/services/form-app/1.3254.0/client-viewer/1693.chunk.min.js",
"https://static.parastorage.com/services/form-app/1.3254.0/client-viewer/680.chunk.min.js",
"https://static.parastorage.com/services/form-app/1.3254.0/client-viewer/form-app-header.chunk.min.js",
"https://static.parastorage.com/services/form-app/1.3254.0/client-viewer/form-app-wix-ricos-viewer.chunk.min.js"
],
"third_party_scripts": 15
},
"status": {
"up": true,
"code": 301,
"timings": {
"dns": 4,
"tls": 41,
"wait": 41,
"connect": 36,
"download": 0
},
"response_ms": 122
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_128_GCM_SHA256",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443
]
},
"carbon": {
"bytes": 715306,
"co2_grams": 0.0262,
"cleaner_than": 1
},
"dns_server": {
"ns": [
{
"ip": "216.239.32.101",
"host": "ns8.wixdns.net"
},
{
"ip": "216.239.34.101",
"host": "ns9.wixdns.net"
}
],
"zone": "arameatws.online"
},
"cookies": {
"cookies": [
{
"name": "ssr-caching"
},
{
"name": "server-session-bind",
"secure": true,
"session": true,
"http_only": true,
"same_site": "Lax"
},
{
"name": "__cf_bm",
"secure": true,
"http_only": true,
"same_site": "None"
},
{
"name": "XSRF-TOKEN",
"secure": true,
"session": true,
"same_site": "None"
}
]
},
"location": {
"ip": "185.230.63.171",
"asn": "58182",
"org": "wix com inc",
"city": "Ashburn",
"country": "US"
},
"ssl": {
"issuer": "Google Trust Services / WR1",
"subject": "arameatws.online"
},
"dns": {
"A": [
"185.230.63.171",
"185.230.63.107",
"185.230.63.186"
],
"NS": [
"ns8.wixdns.net",
"ns9.wixdns.net"
],
"SOA": "{\"nsname\": \"ns8.wixdns.net\", \"hostmaster\": \"support.wix.com\", \"serial\": 2026101915, \"refresh\": 10800, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 3600}"
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"header": "max-age=31556952",
"message": "HSTS header does not include all subdomains."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31556952",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "185.230.63.107",
"family": 4
},
"redirects": {
"chain": [
"https://arameatws.online",
"https://www.arameatws.online/"
],
"count": 1
},
"subdomains": {
"count": 1,
"subdomains": [
"www.arameatws.online"
]
},
"linked_pages": {
"external": [
"https://www.arameatws.online/تقديم-الطلب"
],
"external_count": 1
},
"whois": {
"registrar": "HOSTINGER operations, UAB",
"created": "2026-10-19T15:41:08Z",
"updated": "2026-10-24T15:41:59Z",
"expires": "2027-10-19T15:41:08Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"ns8.wixdns.net",
"ns9.wixdns.net"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31556952",
"x-content-type-options": "nosniff",
"content-language": "en-US",
"link": "; rel=preconnect; crossorigin, ; rel=preconnect, ; rel=preconnect; crossorigin, ; rel=preconnect, ; rel=preconnect; crossorigin",
"x-served-by": "FRA"
}
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/31d48dc7-ca0e-4f23-9e88-8a4d0362e80c.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/31d48dc7-ca0e-4f23-9e88-8a4d0362e80c","captured_at":"2026-11-01T13:47:19Z","sha256":"18c3c092201f5bdd000cb28500068cc0fb4753cf203bfd7f34f249da2767f429","model_image_sha256":"a49ca0b826a9727e81ac9232a25c840673958ddaf36b8e5648a2566db50b1b1c","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/arameatws.online/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/arameatws.online/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/arameatws.online/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/arameatws.online/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/arameatws.online/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/arameatws.online/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/arameatws.online/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/arameatws.online/records.json?source=content&format=json
## Dated availability observation
No conclusive current response is stored
```json
{
"state": "unknown",
"label_key": "availability.unverified",
"detail_key": "detail.no_response",
"params": [],
"source": "current_http_probe",
"record_id": 1731196,
"scope": "checked_url",
"observed_at": "2026-11-02T11:53:23Z",
"http_status": null,
"http_observed_at": "2026-11-02T11:53:23Z",
"stored_http_code": 0,
"stored_http_observed_at": "2026-11-02T11:53:23Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unreachable",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```