WEBSITE ANALYSIS REPORT

https://prime.riverai7z.com/Audible-Books-and-Originals/b/?ie=UTF8&node=18145289011&ref_=nav_cs_audible

17 Oct 2026 · 06:30:26.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:22:38.360 GET 200 document 278.1 KB 386 ms 6 alerts

06:22:39.286 GET 200 stylesheet 57.4 KB 47 ms —

06:22:39.289 GET 200 stylesheet 256.9 KB 55 ms —

06:22:39.292 GET 200 stylesheet 550.9 KB 61 ms —

06:22:39.300 GET 200 img 43 B 594 ms —

06:22:39.301 GET 200 img 20.8 KB 28 ms —

06:22:39.306 GET 200 stylesheet 2.4 KB 46 ms —

06:22:39.311 GET 200 img 8.7 KB 29 ms —

06:22:39.509 GET 200 script 728 B 27 ms —

06:22:39.525 GET 200 fetch 23 B 11 ms —

06:22:39.531 GET 200 img 44.3 KB 14 ms —

06:22:39.613 GET 200 img 14.7 KB 120 ms 6 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://prime.riverai7z.com/favicon.ico

IP / ASN

3.132.114.9

AS16509 · AMAZON-02

Requested by: https://prime.riverai7z.com/Audible-Books-and-Originals/b/?ie=UTF8&node=18145289011&ref_=nav_cs_audible

Resource information

File type: MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
MIME type: image/x-icon
First seen (UTC): 06 Jun 2026 · 08:36:10.839 UTC
Last seen (UTC): 23 Oct 2026 · 07:56:18.235 UTC
Times seen: 2448

Size: 14.7 KB (15086 bytes)
MD5: 248ebd2e5f33f3e345992dfb5ede0ca9
SHA1: 542f10bcdcf95d7a3c493389347740c758293a1a
SHA256: 5866636f18764cd66366ae6eb682e972b4eae1771512cd76b304b6dd3c0f1d2d

Certificate information

Issuer: Let's Encrypt · YE2
Subject: prime.riverai7z.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 47:57:37:86:FD:76:50:51:74:F3:AA:E1:E5:70:02:C1:0A:30:CB:31
Valid from: Tue, 13 Oct 2026 11:19:41 GMT
Valid until: Mon, 11 Jan 2027 11:19:40 GMT

Technology fingerprints

Amazon CloudFront (CDN)
HSTS (Security)
Amazon Web Services (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: prime.riverai7z.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://prime.riverai7z.com/Audible-Books-and-Originals/b/?ie=UTF8&node=18145289011&ref_=nav_cs_audible
Cookie: csm-hit=tb:s-FGKKY5XSFS20J9P5XS1P|1792218159454&t:1792218159454
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
alt-svc: h3=":443"; ma=86400
content-type: image/x-icon
x-amz-ir-id: 22e0d7e4-6e82-4aef-b24f-204925124389
vary: Accept-Encoding
age: 49030
server: Server
via: 1.1 a10a7384ec53ee4c3ce439b9f86213b2.cloudfront.net (CloudFront), 1.1 bf30f50cfbcc4e619604398d6a02d0c6.cloudfront.net (CloudFront)
strict-transport-security: max-age=47474747; includeSubDomains; preload
cache-control: max-age=86400,public
x-amz-rid: W8QD08TZY5KQE3R4Z2HT
date: Fri, 16 Oct 2026 16:45:29 GMT
content-length: 15086
x-amz-cf-id: TNSOR7IBcFgRe0Kqfr_H-nlEtWz69bAe82sKZXE_TotK-s0TrKAP0w==
edge-cache-control: no-store,no-cache,stale-if-error=0,stale-while-revalidate=0
accept-ranges: bytes
x-nginx-cache-status: HIT
timing-allow-origin: https://www.amazon.com
expires: Fri, 16 Oct 2026 20:20:36 GMT
x-cache: Hit from cloudfront
last-modified: Fri, 29 May 2026 19:06:49 GMT
access-control-allow-origin: *
edge-cache-tag: x-cache-013,/images/G/01/aui/favicon_v2
accept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT
surrogate-key: x-cache-013 /images/G/01/aui/favicon_v2
x-amz-cf-pop: CMH68-P7, CMH68-P7
x-frame-options: SAMEORIGIN

06:22:39.626 GET 200 script 91.1 KB 12 ms —

06:22:39.629 GET 200 script 295.2 KB 18 ms —

06:22:39.632 GET 200 script 52.4 KB 16 ms —

06:22:39.633 GET 200 script 639.7 KB 20 ms —

06:22:39.783 POST 403 xhr 2.3 KB 176 ms 6 alerts

06:22:39.816 POST 200 xhr 0 B 175 ms 6 alerts

06:22:39.827 GET 200 img 13.7 KB 10 ms —

06:22:39.862 GET 200 img 1.7 KB 10 ms —

06:22:40.011 GET 503 xhr 2.6 KB 130 ms 6 alerts

06:22:40.230 POST 200 beacon 0 B 0 ms —

06:22:40.232 GET 200 img 43 B 95 ms —

06:22:40.236 POST 200 beacon 0 B 0 ms —

06:22:40.237 GET 200 script 7.3 KB 29 ms —

06:22:40.239 POST 200 beacon 0 B 0 ms —

06:22:40.402 GET 200 img 43 B 95 ms —

06:22:40.410 GET 200 font 16.2 KB 10 ms —

06:22:40.413 GET 200 font 16.1 KB 10 ms —

06:22:40.415 GET 200 font 27.3 KB 10 ms —

06:22:40.418 GET 200 font 21.0 KB 10 ms —

06:22:40.422 GET 200 font 16.9 KB 10 ms —

06:22:40.426 GET 200 font 17.0 KB 10 ms —

06:22:40.428 GET 200 font 28.6 KB 10 ms —

06:22:40.431 GET 200 font 22.7 KB 10 ms —

06:22:40.433 GET 200 font 31.7 KB 10 ms —

06:22:40.435 GET 200 font 32.1 KB 10 ms —

06:22:40.438 GET 200 font 31.5 KB 10 ms —

06:22:40.440 GET 200 font 31.9 KB 10 ms —

06:22:40.443 GET 200 font 31.6 KB 10 ms —

06:22:40.444 GET 200 font 32.4 KB 10 ms —

06:22:40.447 GET 200 font 25.2 KB 10 ms —

06:22:40.448 GET 200 font 26.0 KB 10 ms —

06:22:40.451 GET 200 font 25.1 KB 9 ms —

06:22:40.452 GET 200 font 25.7 KB 10 ms —

06:22:40.456 GET 200 font 25.2 KB 11 ms —

06:22:40.461 GET 200 font 26.0 KB 10 ms —

06:22:40.556 POST 200 beacon 0 B 0 ms —

06:22:41.363 GET 200 img 71 B 136 ms 6 alerts

06:22:41.870 GET 200 script 33.1 KB 9 ms —

https://prime.riverai7z.com/Audible-Books-and-Originals/b/?ie=UTF8&node=18145289011&ref_=nav_cs_audible

Domain graph

Hostnames

Connections