Report - al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd

Report Overview

Submitted URL
al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd
IP
192.185.136.234
ASN
#19871 NETWORK-SOLUTIONS-HOSTING
Submitted
2024-03-28 11:01:23
Access
public
Website Title
Microsoft
Final URL
al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
al-wataniagroup.com	unknown	2017-12-28	2019-06-11	2023-12-21	3.1 kB	172 kB	192.185.136.234
img1.wsimg.com	9893	2008-03-17	2012-06-20	2024-03-28	868 B	22 kB	23.36.79.16
events.api.secureserver.net	125179	1998-03-30	2020-06-23	2024-03-27	2.3 kB	936 B	95.101.10.195
csp.secureserver.net	unknown	1998-03-30	2022-12-18	2024-03-28	2.2 kB	2.3 kB	104.110.14.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd	315 B	2023-03-13	2024-03-31
Pretty URL al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd IP 192.185.136.234 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 04:58:55 Last Seen2024-03-31 06:58:20 Times Seen22 Hash 51991c75877262eb50a87f2f1f6a8fb0 734b1a58b1c3fbf68a89df8bc8f877073967f2ef 0c3d35d24946319731f4c1f918966144ad683b5189a90da403ae358da3ffb6b1 Loading...

	al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd	0 B	2023-03-07	2024-04-27
Pretty URL al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd IP 192.185.136.234 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 13:51:22 Times Seen37121239 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js	106 kB	2024-03-22	2024-04-27
Pretty URL img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js IP 23.36.79.16 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:30:50 Last Seen2024-04-27 07:29:47 Times Seen393 Hash fdf3f3c180ae2aa6864f9c46a83a37a9 59f698af339af479bc5447e5da54778d909c7068 e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664 Loading...

HTTP Transactions (15)

	URL	IP	Response	Size
	al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd	192.185.136.234	200 OK	1.6 kB
URL User Request GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING File type JavaScript source, ASCII text, with very long lines (417), with CRLF line terminators Size 1.6 kB (1601 bytes) Hash 86025279b3d02837d3ed695beb7ecd10 0f279e4601778a570a204e04a67164116be1c691 cd879905ba7870596958ca4b0dc36255f9d5eb14b8dd14f3a3abc40cdc06ceb9 HTTP Headers `GET /sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1601 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8`

	img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js	23.36.79.16	301 Moved Permanently	0 B
URL GET HTTP/2 img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js IP 23.36.79.16:443 ASN #20940 Akamai International B.V. Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /tcc/tcc_l.combined.1.0.6.min.js HTTP/1.1 Host: img1.wsimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently content-length: 0 location: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js cache-control: max-age=31536000 expires: Fri, 28 Mar 2025 11:00:58 GMT date: Thu, 28 Mar 2024 11:00:58 GMT timing-allow-origin: * access-control-allow-origin: * X-Firefox-Spdy: h2`

	img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js	23.36.79.16	200 OK	20 kB
URL GET HTTP/2 img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js IP 23.36.79.16:443 ASN #20940 Akamai International B.V. Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 20 kB (20488 bytes) Hash fdf3f3c180ae2aa6864f9c46a83a37a9 59f698af339af479bc5447e5da54778d909c7068 e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664 HTTP Headers `GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1 Host: img1.wsimg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://al-wataniagroup.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-amz-id-2: zSfZtamdtBiCmRf7q6I0dc5TXg6SYAMwxO2Fn0cVkxc75aNa94ehodGTsMhV1dFuGdVHTiRr5UmxBYR/ArT8Jg== x-amz-request-id: E0CSM1KGY3NCQ66T last-modified: Fri, 22 Mar 2024 13:06:20 GMT etag: "fdf3f3c180ae2aa6864f9c46a83a37a9" x-amz-server-side-encryption: AES256 x-amz-meta-version: 0.2.5 x-amz-version-id: NUbpk_ypfZoRQFFJE7rB4qpj7fMsB7r1 accept-ranges: bytes content-type: text/javascript vary: Accept-Encoding content-encoding: gzip cache-control: max-age=1800 expires: Thu, 28 Mar 2024 11:30:58 GMT date: Thu, 28 Mar 2024 11:00:58 GMT content-length: 20488 timing-allow-origin: * access-control-allow-origin: * X-Firefox-Spdy: h2

	al-wataniagroup.com/sharepointhopeusa/s/css/style.css	192.185.136.234	200 OK	2.0 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/css/style.css IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type ASCII text, with CRLF line terminators Size 2.0 kB (1965 bytes) Hash f42cd1032bdf146f8c47ef147c26acb9 646aecd8a719e45e696e4833d3277ed5d488829d 0c3903c3fe3749bb8040d278dc47a7ac9bd10caafcda272f0c1d671e0d2e7347 HTTP Headers `GET /sharepointhopeusa/s/css/style.css HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Last-Modified: Thu, 20 Aug 2020 22:24:46 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1965 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/css`

	al-wataniagroup.com/sharepointhopeusa/s/assets/one.png	192.185.136.234	200 OK	13 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/assets/one.png IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type PNG image data, 2058 x 654, 8-bit colormap, non-interlaced Size 13 kB (13149 bytes) Hash cdb04b48341ca6569cacba5c4ca5a528 d05d663743e0b8a9248608d0ae8e5b512c789622 7f672d39017602a1ef5b484477bb7743904515691c3a0242993934d1dd833ece HTTP Headers `GET /sharepointhopeusa/s/assets/one.png HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 20 Aug 2020 22:24:44 GMT Accept-Ranges: bytes Content-Length: 13149 Keep-Alive: timeout=5, max=75 Content-Type: image/png`

	al-wataniagroup.com/sharepointhopeusa/s/css/1.png	192.185.136.234	200 OK	87 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/css/1.png IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1200x801, components 3 Size 87 kB (87394 bytes) Hash a78231b4399bc7414a468c789a3ad9f9 bae8238202db18044d9e0f43c76eb959a7538a25 f976f4d3c1a91b473a555b2a3cea61e8e2a2a556da43fc31cf34f8cb0cc84240 HTTP Headers `GET /sharepointhopeusa/s/css/1.png HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Last-Modified: Thu, 20 Aug 2020 22:24:44 GMT Accept-Ranges: bytes Content-Length: 87394 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: image/png`

	al-wataniagroup.com/sharepointhopeusa/s/img/mail.png	192.185.136.234	200 OK	32 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/img/mail.png IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Size 32 kB (31505 bytes) Hash 310e92b3d6c4899b96d2b49e6dd9f9c5 fbc32f00652f09c2d7adc11b0858c5f00fa7420f 698c5bd6703e9ebeb2d9942fe1a29fd4f1ad5991c53089f1962f828c0b8dfd4d HTTP Headers `GET /sharepointhopeusa/s/img/mail.png HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 20 Aug 2020 22:24:46 GMT Accept-Ranges: bytes Content-Length: 31505 Keep-Alive: timeout=5, max=75 Content-Type: image/png`

	al-wataniagroup.com/sharepointhopeusa/s/img/office.png	192.185.136.234	200 OK	17 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/img/office.png IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Size 17 kB (17147 bytes) Hash d596c0ec992a14c5bab7ae12bd8734fc 5340904149e6a0d9e545d672fd2c2563ff4e97c1 7fdbc14d6508de7a3bc4aa64da8d28fa0429333220dc611513a718fc26287069 HTTP Headers `GET /sharepointhopeusa/s/img/office.png HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 20 Aug 2020 22:24:46 GMT Accept-Ranges: bytes Content-Length: 17147 Keep-Alive: timeout=5, max=75 Content-Type: image/png`

	al-wataniagroup.com/sharepointhopeusa/s/assets/favicon.ico	192.185.136.234	200 OK	17 kB
URL GET HTTP/1.1 al-wataniagroup.com/sharepointhopeusa/s/assets/favicon.ico IP 192.185.136.234:80 ASN #19871 NETWORK-SOLUTIONS-HOSTING Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Size 17 kB (17174 bytes) Hash 12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 HTTP Headers `GET /sharepointhopeusa/s/assets/favicon.ico HTTP/1.1 Host: al-wataniagroup.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 11:00:58 GMT Server: Apache Last-Modified: Thu, 20 Aug 2020 22:24:44 GMT Accept-Ranges: bytes Content-Length: 17174 Cache-Control: max-age=604800 Expires: Thu, 04 Apr 2024 11:00:58 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: image/x-icon`

	events.api.secureserver.net/t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&vtg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.829Z&hit_id=a9fa7cef-0103-40dd-b795-c72c4f27e6c5&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1041521570&tce=1711623658023&tcs=1711623657908&tdc=1711623658818&tdclee=1711623658485&tdcles=1711623658481&tdi=1711623658481&tdl=1711623658174&tdle=1711623657908&tdls=1711623657907&tfs=1711623657901&tns=1711623657901&trqs=1711623658023&tre=1711623658152&trps=1711623658151&tles=1711623658818&tlee=0&nt=navigate&nav_type=hard	95.101.10.195	200 OK	43 B
URL GET HTTP/2 events.api.secureserver.net/t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&vtg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.829Z&hit_id=a9fa7cef-0103-40dd-b795-c72c4f27e6c5&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1041521570&tce=1711623658023&tcs=1711623657908&tdc=1711623658818&tdclee=1711623658485&tdcles=1711623658481&tdi=1711623658481&tdl=1711623658174&tdle=1711623657908&tdls=1711623657907&tfs=1711623657901&tns=1711623657901&trqs=1711623658023&tre=1711623658152&trps=1711623658151&tles=1711623658818&tlee=0&nt=navigate&nav_type=hard IP 95.101.10.195:443 ASN #20940 Akamai International B.V. Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.api.secureserver.net Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58 ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT File type GIF image data, version 89a, 1 x 1 Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers GET /t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&vtg=b4f86d7d-c4c8-4ba9-b7dd-b0e821fa4ea3&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.829Z&hit_id=a9fa7cef-0103-40dd-b795-c72c4f27e6c5&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1041521570&tce=1711623658023&tcs=1711623657908&tdc=1711623658818&tdclee=1711623658485&tdcles=1711623658481&tdi=1711623658481&tdl=1711623658174&tdle=1711623657908&tdls=1711623657907&tfs=1711623657901&tns=1711623657901&trqs=1711623658023&tre=1711623658152&trps=1711623658151&tles=1711623658818&tlee=0&nt=navigate&nav_type=hard HTTP/1.1 Host: events.api.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: image/gif content-length: 43 access-control-allow-origin: http://al-wataniagroup.com access-control-allow-credentials: true x-robots-tag: noindex, nofollow cache-control: private x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-frame-options: DENY date: Thu, 28 Mar 2024 11:00:59 GMT X-Firefox-Spdy: h2`

	events.api.secureserver.net/t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=d08ea588-675e-451c-9446-16ddb6d68819&vtg=d08ea588-675e-451c-9446-16ddb6d68819&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.480Z&hit_id=7312b23e-86c4-4aee-b955-e52f8959f489&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1227393951	95.101.10.195	200 OK	43 B
URL GET HTTP/2 events.api.secureserver.net/t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=d08ea588-675e-451c-9446-16ddb6d68819&vtg=d08ea588-675e-451c-9446-16ddb6d68819&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.480Z&hit_id=7312b23e-86c4-4aee-b955-e52f8959f489&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1227393951 IP 95.101.10.195:443 ASN #20940 Akamai International B.V. Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.api.secureserver.net Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58 ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT File type GIF image data, version 89a, 1 x 1 Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers GET /t/1/tl/event?dh=al-wataniagroup.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=d08ea588-675e-451c-9446-16ddb6d68819&vtg=d08ea588-675e-451c-9446-16ddb6d68819&dp=%2Fsharepointhopeusa%2Fs%2Flogin.php&trace_id=91e1da4e487546a69971c5d29457917a&cts=2024-03-28T11%3A00%3A58.480Z&hit_id=7312b23e-86c4-4aee-b955-e52f8959f489&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh%22%2C%22server%22%3A%22p3plcpnl0778%22%7D&ap=cpsh&vci=2082073565&z=1227393951 HTTP/1.1 Host: events.api.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: image/gif content-length: 43 access-control-allow-origin: http://al-wataniagroup.com access-control-allow-credentials: true x-robots-tag: noindex, nofollow cache-control: private x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 ; includeSubDomains x-frame-options: DENY date: Thu, 28 Mar 2024 11:00:59 GMT X-Firefox-Spdy: h2`

	csp.secureserver.net/eventbus	104.110.14.92	202 Accepted	0 B
URL POST HTTP/1.1 csp.secureserver.net/eventbus IP 104.110.14.92:443 ASN #16625 AKAMAI-AS Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.secureserver.net FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /eventbus HTTP/1.1 Host: csp.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Referer: http://al-wataniagroup.com/ Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 x-amzn-requestid: 03d7d512-7ca2-4cc6-9ff4-847d354a5325 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type,authorization x-amz-apigw-id: VVkcyHNAIAMEHcA= Access-Control-Allow-Methods: OPTIONS,POST x-amzn-trace-id: Root=1-66054deb-7e05f322487f7c2b5b42a460 x-envoy-upstream-service-time: 5 Expires: Thu, 28 Mar 2024 11:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Mar 2024 11:00:59 GMT Connection: keep-alive Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

	csp.secureserver.net/eventbus	104.110.14.92	202 Accepted	0 B
URL POST HTTP/1.1 csp.secureserver.net/eventbus IP 104.110.14.92:443 ASN #16625 AKAMAI-AS Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.secureserver.net FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /eventbus HTTP/1.1 Host: csp.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Referer: http://al-wataniagroup.com/ Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 x-amzn-requestid: 38d235ff-2df6-43c3-9cf7-001f6133dd82 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type,authorization x-amz-apigw-id: VVkcyETaoAMENDw= Access-Control-Allow-Methods: OPTIONS,POST x-amzn-trace-id: Root=1-66054deb-6ab859f143ca51f3172ed7d4 x-envoy-upstream-service-time: 6 Expires: Thu, 28 Mar 2024 11:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Mar 2024 11:00:59 GMT Connection: keep-alive Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

	csp.secureserver.net/eventbus	104.110.14.92	202 Accepted	0 B
URL POST HTTP/1.1 csp.secureserver.net/eventbus IP 104.110.14.92:443 ASN #16625 AKAMAI-AS Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.secureserver.net FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /eventbus HTTP/1.1 Host: csp.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Authorization: api-key b18ef4f046435b64a469b32c3c1c20a3 Content-Type: application/json Content-Length: 1120 Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 202 Accepted Content-Type: application/json Content-Length: 0 x-amzn-requestid: e1f63a53-221d-41ff-854c-9640c3f9848a Access-Control-Allow-Origin: * x-amz-apigw-id: VVkczFNUoAMEXSg= x-amzn-trace-id: Root=1-66054deb-28915da6478ca224211853fd x-envoy-upstream-service-time: 98 Expires: Thu, 28 Mar 2024 11:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Mar 2024 11:00:59 GMT Connection: keep-alive Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

	csp.secureserver.net/eventbus	104.110.14.92	202 Accepted	0 B
URL POST HTTP/1.1 csp.secureserver.net/eventbus IP 104.110.14.92:443 ASN #16625 AKAMAI-AS Requested by http://al-wataniagroup.com/sharepointhopeusa/s/login.php?dispatched=97&id=3703843224&websrc=59c275dc2e97dd3b896ed4ff2b82a8fd Certificate IssuerStarfield Technologies, Inc. Subject.secureserver.net FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /eventbus HTTP/1.1 Host: csp.secureserver.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Authorization: api-key 8da2217409854bee82e12dc4ca0b39fb Content-Type: application/json Content-Length: 1871 Origin: http://al-wataniagroup.com DNT: 1 Connection: keep-alive Referer: http://al-wataniagroup.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 202 Accepted Content-Type: application/json Content-Length: 0 x-amzn-requestid: 4cfb79c8-fe92-4524-a250-a499a294eb74 Access-Control-Allow-Origin: * x-amz-apigw-id: VVkc0G-tIAMEmAw= x-amzn-trace-id: Root=1-66054deb-2a4cd87633628c014c7f1322 x-envoy-upstream-service-time: 100 Expires: Thu, 28 Mar 2024 11:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Mar 2024 11:00:59 GMT Connection: keep-alive Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash