Overview

URLmynabsecured.com/
IP 194.36.191.196 (Netherlands)
ASN#60117 Host Sailor Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-29 19:00:27 UTC
StatusLoading report..
IDS alerts0
Blocklist alert52
urlquery alerts
21
Phishing - National Australia Bank
Tags None

Domain Summary (9)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (4) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1352 3544 23.36.77.32
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1594 93.184.220.29
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
code.jquery.com (1) 634 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 398 84832 69.16.175.42
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5843 34.160.144.191
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
mynabsecured.com (35) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 17051 430136 194.36.191.196
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.39.62.124
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3245 49074 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited
2022-11-29 medium mynabsecured.com/ National Australia Bank Limited

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-29 medium mynabsecured.com/ Phishing
2022-11-29 medium mynabsecured.com/static/bootstrap.min.js Phishing
2022-11-29 medium mynabsecured.com/assets/star_nab_more.03a9540d7ae7a72c39c235f7e58679c3.svg Phishing
2022-11-29 medium mynabsecured.com/assets/star_nab.49030fddae05ccbb4a82467133879db3.svg Phishing
2022-11-29 medium mynabsecured.com/assets/index_1.html Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-600.605135ed81218e3c6926d6603a2aba14.woff2 Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-700.c18b7366babf6ace33427f60cf7fa7e0.woff2 Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-400.58dd2a1c6d7861ea261912ba153ac8e3.woff2 Phishing
2022-11-29 medium mynabsecured.com/assets/epilogue-600.277829caedf33fa33e47d9c481d2fb10.woff2 Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-300.a8ae0d5401bb928346ea5696443d4909.woff2 Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-regular-webfont.woff Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-light-webfont.woff Phishing
2022-11-29 medium mynabsecured.com/assets/sourcesanspro-bold-webfont.woff Phishing
2022-11-29 medium mynabsecured.com/files/activity.php Phishing
2022-11-29 medium mynabsecured.com/files/activity.php Phishing
2022-11-29 medium mynabsecured.com/files/activity.php Phishing
2022-11-29 medium mynabsecured.com/files/activity.php Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 194.36.191.196
Date UQ / IDS / BL URL IP
2023-06-01 16:08:51 UTC 0 - 0 - 1 webmail.authsmnsecure.com/css/login.php?email (...) 194.36.191.196
2023-05-30 13:59:34 UTC 0 - 0 - 1 webmail.authsmnsecure.com/css/login.php?email (...) 194.36.191.196
2023-05-30 09:42:53 UTC 0 - 0 - 2 webmail.authsmnsecure.com/css/login.php?email (...) 194.36.191.196
2023-05-29 23:29:12 UTC 0 - 0 - 2 webmail.authsmesecure.com/css/login.php?email (...) 194.36.191.196
2023-05-28 06:34:59 UTC 0 - 0 - 3 webmail.authsmecsecure.com/css/login.php?emai (...) 194.36.191.196


Last 5 reports on ASN: Host Sailor Ltd
Date UQ / IDS / BL URL IP
2023-06-02 00:38:29 UTC 0 - 0 - 1 185.141.27.185/esppx.exe?TnZDLd 185.141.27.185
2023-06-02 00:34:27 UTC 0 - 0 - 1 185.141.27.185/esppx.exe?TnZDLd/ 185.141.27.185
2023-06-01 16:37:02 UTC 0 - 1 - 0 www.freegamesland.net/download/?Command-&-Con (...) 185.45.194.180
2023-06-01 16:08:51 UTC 0 - 0 - 1 webmail.authsmnsecure.com/css/login.php?email (...) 194.36.191.196
2023-06-01 14:25:53 UTC 0 - 1 - 2 185.82.200.173/ddl/mountainsmap-premium-62626 (...) 185.82.200.173


Last 3 reports on domain: mynabsecured.com
Date UQ / IDS / BL URL IP
2022-11-29 21:47:06 UTC 21 - 0 - 52 mynabsecured.com/ 194.36.191.196
2022-11-29 19:00:27 UTC 21 - 0 - 52 mynabsecured.com/ 194.36.191.196
2022-11-29 17:03:04 UTC 20 - 0 - 51 mynabsecured.com/ 194.36.191.196


Last 3 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-29 21:47:06 UTC 21 - 0 - 52 mynabsecured.com/ 194.36.191.196
2022-11-29 17:03:04 UTC 20 - 0 - 51 mynabsecured.com/ 194.36.191.196
2022-11-28 18:33:04 UTC 21 - 0 - 53 mynabsupport.com/ 185.244.151.84

JavaScript

Executed Scripts (11)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (53)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4446
Expires: Tue, 29 Nov 2022 20:14:21 GMT
Date: Tue, 29 Nov 2022 19:00:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5159
Expires: Tue, 29 Nov 2022 20:26:14 GMT
Date: Tue, 29 Nov 2022 19:00:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4308
Cache-Control: max-age=146564
Date: Tue, 29 Nov 2022 19:00:15 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 11:42:59 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 5RDnZ5e1rp5q5+uT/c+pok7xW1B5sPMSzEHPvESVGf2fo+634Q+WgKvtTsDP6a0wP5ItFth66B8=
x-amz-request-id: 14EV2ZYEJXXKXDN1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 18:45:34 GMT
age: 881
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 18:19:38 GMT
cache-control: public,max-age=3600
age: 2437
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 29 Nov 2022 19:00:15 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 18:11:13 GMT
cache-control: public,max-age=3600
age: 2943
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
set-cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 7550
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11003), with CRLF line terminators
Size:   7550
Md5:    b49d07c2aee583ef19e54a952f95f417
Sha1:   8141b47a4c2bb72e88923ef75a373b2526df322f
Sha256: f3d565a68298fd0e169d5fb96f1de4631db4e9276c7f4ae1d36f4463becbd9f6

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5453
Cache-Control: max-age=142645
Date: Tue, 29 Nov 2022 19:00:16 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:37:41 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/DB9VIBs1dTqVFazgPNNQC.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 48
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   48
Md5:    e31c76f12514071c5d9ba567331bd6a8
Sha1:   f8b0ff95fea7c6887704f6ad856adf7a5306f385
Sha256: 555963f3061e2caec05122b9f44900e6d7fbf5e96485aa1a3e99f70091f4d5c7

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/reset.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 306
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (607), with no line terminators
Size:   306
Md5:    b73c12aec58141dfce195088c76cb501
Sha1:   6b3ef400f2bbcf07875bbd570768fb516169b745
Sha256: c790e23bb673e356f0862ccbddd71cb9cbd4f58bccd9981b259b491029c50b37

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/_template-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4044
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   4044
Md5:    83e20c5c18cf6b1c39baa4b3b76800f0
Sha1:   d02ea4aa3a2759a2f873b351a08200f0fdf7a559
Sha256: a07ed40a8a9591713d777fae7329f48d8e18fae335585a19178bb33101e5a016

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/_content-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2938
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2938
Md5:    13bac3de58befd53a837e3a5a30b6c87
Sha1:   d08ee94cf7905d5112b4e769a46ce527f6397837
Sha256: c3d1f4dbc83fe55d5244c125c4e2e101ee2fda0c19e6e2fea962dc2491ce2bc7

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/added-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1227
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1227
Md5:    3db5fad4599268fe264b119b9ae65c0c
Sha1:   d7bd5b5ea6b8ef6a5467496d921e8751a84beb80
Sha256: f07a259f0f44501affc629aa8267dab154d50c14fa0cb578735730d81d0fac14

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/_campaign-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 698
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   698
Md5:    b2bf784521a1c73f9cbb2b0a2be3387a
Sha1:   8918f6cc5577385554a71e6b6f7c152bf2ddd479
Sha256: 7c4646126401dfc3541ff6187d5027145db0ec2aa15acbdff0f02949f6eeb925

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/_ibRedesign-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1994
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1994
Md5:    c66c3bfd78e04202c845b325655a15e8
Sha1:   d19e89eaab51cf0f40f1b23c17335603f3775854
Sha256: b4840d7440302f73af9ac18d740adfac5d40a90129d8efb302d7a859bcb00965

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/_print-styles.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1243
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1243
Md5:    c64e6e94e20851b9155dafb21b9cd4cd
Sha1:   bd4c2a6e1a4afea349642527ad034c498af38d02
Sha256: 6ca31f167e05f8950d7d62b039b4d5ddb7516ff1df7b1db33365636e4096bd7f

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/jquery.fancybox-1.3.1.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1394
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1394
Md5:    4bfaae71d74dab94239fdf89952bcda6
Sha1:   55c59a165131554f7c7a5a9597aaea496170c27c
Sha256: 4bbeb3e4b85f9c3b5c49fc7015c4c1bf8fe0f7fe35c376e072d5fd914e112a26

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/loader-page.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 667
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2952), with no line terminators
Size:   667
Md5:    08a0d7f5b7c11c0ca1a8a6b8aa01fa8d
Sha1:   a9d263379407c9fc70570c3ff18052dd0c5b872d
Sha256: 499f7bbc5b9bef8e26f4de0f24041066429429a082513db760d8b4efc79283cd

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/loader.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7779
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (60372), with no line terminators
Size:   7779
Md5:    09a0ef4c0e8f5e0988bea3f290a8b148
Sha1:   1444b5f4d63537ee23e22bce70ff4601a32db7ee
Sha256: b0f91891f1d3d3d5d45a70f2a78ce2bfbb92c9d8099a2c519815078b30a775b2

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /static/bootstrap.min.js HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: application/javascript
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sat, 24 Sep 2022 11:13:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14242
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (59893)
Size:   14242
Md5:    b52707dcdf4c96a6a787aaeb8db57639
Sha1:   e52c9728e4291cbc6c0d3934818d0c8128b21788
Sha256: ed28f5ac0ce365f45979d30a908fcaac1eee266d38330ef0e96273d3912932ac

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/c1986af3c26609b8b7d8933f99c51c1a89e9ea6b.png HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: image/png
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 68
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    91e42db1c66c0b276abf6234dc50b2eb
Sha1:   c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
Sha256: 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/star_nab_more.03a9540d7ae7a72c39c235f7e58679c3.svg HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: image/svg+xml
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3208
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (6172)
Size:   3208
Md5:    2288c639a915c627d6bc649321d16886
Sha1:   cbdeb5a22e6cc943706e1c44c5620d2cdddcec16
Sha256: 613462eee867947802ee8300e99175b0e7c5c13bb7d08eae5500838a349e6554

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/star_nab.49030fddae05ccbb4a82467133879db3.svg HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: image/svg+xml
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1056
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (877)
Size:   1056
Md5:    877c670a5114fb7adbc4daa50a6c4f44
Sha1:   337ce8f2001e64e1920dfe9ce56841f3678f2bcb
Sha256: a013217a3a11a321fab7bf42ed8110cfc751c6e2107a745fdd730b47b5d098c5

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/DB9VIBGA0tUTGGlsCt.gif HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:38:18 GMT
accept-ranges: bytes
content-length: 43
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /jquery-3.5.1.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mynabsecured.com
Connection: keep-alive
Referer: https://mynabsecured.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Tue, 29 Nov 2022 19:00:16 GMT
content-encoding: gzip
content-length: 84374
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-4638e"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669748416.dop002.sk1.t,1669748416.cds237.sk1.hn,1669748416.cds207.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   84374
Md5:    ad571ea184084783080d0391add24d9f
Sha1:   5a94acbbe3c7dfeadbb5af44b4baf7920243c4b1
Sha256: 5bfb1df44242cef31542b5b193050538e90183b515ffe0b99037b97d1fc42e0f
                                        
                                            GET /assets/font-sourcesanspro.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/assets/_ibRedesign-styles.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 195
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   195
Md5:    b8212fe3efb0854bc287c455d2a71ff5
Sha1:   e89ad584cc4bd8462de44b5848be743b8f98c932
Sha256: 9f5e01c1bd9998a45d556dc048564e4fa8ef00d52cca514aa4ac8df8d2edd7ad

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/ib-components.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/assets/_ibRedesign-styles.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:55 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1474
date: Tue, 29 Nov 2022 18:57:55 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1474
Md5:    a4256edbe49dd68935ba867e829f6892
Sha1:   f9de6bb2192678abdd0d0608dc25c2190754ba31
Sha256: a92e6376fddb532f45439ccbbe8b8792d73c94ce42521572084a60c832e34518

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/index_1.html HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html
                                            
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4734
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3367)
Size:   4734
Md5:    03e47b941183bcd3afeeac157e500bed
Sha1:   98a147de3a78e2cd30e0354cb60193137be0c424
Sha256: f0f7df406fd81bdf44fbccfc9ef87f119013f2cb6ab403b0b138fec6a715d548

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +PkASXGxdWTanPecnE+arQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.39.62.124
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HwpBfKBHo/0IE5LIzwZdG3adt6Q=

                                        
                                            GET /assets/sourcesanspro-600.605135ed81218e3c6926d6603a2aba14.woff2 HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/loader.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff2
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 17988
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17988, version 1.3276\012- data
Size:   17988
Md5:    605135ed81218e3c6926d6603a2aba14
Sha1:   38c5d6ce98e2b8d405b910cf6c8d73d01ccf01b7
Sha256: a97d10cefd0d747b1db289932dddd94f0e651b70a60af08de5e254539cb4ddec

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/sourcesanspro-700.c18b7366babf6ace33427f60cf7fa7e0.woff2 HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/loader.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff2
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:40 GMT
accept-ranges: bytes
content-length: 13892
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13892, version 1.3276\012- data
Size:   13892
Md5:    c18b7366babf6ace33427f60cf7fa7e0
Sha1:   b380e9f3dc4dfb061e70a88e1156ec89b008808a
Sha256: 895b2a4707f964bde44b6543d155f6dc43ddf4bcff2dc46094789a7e313e07f0

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/sourcesanspro-400.58dd2a1c6d7861ea261912ba153ac8e3.woff2 HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/loader.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff2
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 14308
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 14308, version 1.3276\012- data
Size:   14308
Md5:    58dd2a1c6d7861ea261912ba153ac8e3
Sha1:   235c384b9599ed2099f8fda87ba7bc8917eb1aa4
Sha256: 599d93e0748728edc6bd55a82a52bff61196b149d566a67d4ed86d55d9c520aa

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/epilogue-600.277829caedf33fa33e47d9c481d2fb10.woff2 HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/loader.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff2
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 12696
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12696, version 1.0\012- data
Size:   12696
Md5:    277829caedf33fa33e47d9c481d2fb10
Sha1:   969f882dcdfe2cdea0e01f1e51d7c4433137cc20
Sha256: f951333e6474d4b7f9cd23d5afea66130b4175f40b88f3b0979d545663d391ec

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/sourcesanspro-300.a8ae0d5401bb928346ea5696443d4909.woff2 HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/loader.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff2
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 14308
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 14308, version 1.3276\012- data
Size:   14308
Md5:    a8ae0d5401bb928346ea5696443d4909
Sha1:   b9c7821c54dad58ca7f53e42cb17cb7b85f37d0a
Sha256: a4fac6d6f6782da9cfe8d8c756d89953e2e1ca6a5340724385b948e083bbf569

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/ib-login-banner2-1797x800.jpg HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: image/jpeg
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 194291
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1796], baseline, precision 8, 1796x800, components 3\012- data
Size:   194291
Md5:    a274b2f542dec44644c62799a939810a
Sha1:   075b85b88c01352fc17aea26c5657e3057f76a84
Sha256: eaa5a0f93d160bb09361d0e50ea7b683981b432fe751167b47dbc652003a8f90

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/font-awesome.css HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/assets/index_1.html
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6937
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  troff or preprocessor input, ASCII text
Size:   6937
Md5:    5118fddd89f7a81f4358c48e7697443a
Sha1:   aa758d65ea0a7115e0a9bedf309d296f3502cae2
Sha256: b24e197a3985ee6410a72eacfed8a960008c8498a5d19dcac0189e4e4ea112c1

Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            GET /assets/sourcesanspro-regular-webfont.woff HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/font-sourcesanspro.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:38:08 GMT
accept-ranges: bytes
content-length: 29732
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 29732, version 1.0\012- data
Size:   29732
Md5:    4440f259fcdef6dda5afd975630b8d71
Sha1:   24028762499de3667947915992dc5b58c4607c99
Sha256: a07b6772c9e702f6f2b7b83e02f76515970eb54aeec4b7b7b00450a3b35594f3

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/sourcesanspro-light-webfont.woff HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/font-sourcesanspro.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:37:36 GMT
accept-ranges: bytes
content-length: 29440
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 29440, version 1.0\012- data
Size:   29440
Md5:    23b3096d364fd833d407bd64ee3c83de
Sha1:   2a19c57f647127d2b3814404573bc85f847fef24
Sha256: c023c07272e16a150972863fbc304dc10b10f0e56589314af574a4157b19133d

Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /assets/sourcesanspro-bold-webfont.woff HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mynabsecured.com/assets/font-sourcesanspro.css
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: font/woff
                                            
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 18:57:56 GMT
last-modified: Sun, 27 Nov 2022 05:38:16 GMT
accept-ranges: bytes
content-length: 29328
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 29328, version 1.0\012- data
Size:   29328
Md5:    65fbd879ddef000960975d2da6ddee97
Sha1:   89324cc14086364d5ce2ef6dd8de0e630937476f
Sha256: 15435827eb508b00a5a473032738918ece0a1a6baba4f2a8832d9e8b8d886587

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 404 Not Found
content-type: text/html
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-length: 1238
date: Tue, 29 Nov 2022 18:57:56 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1238
Md5:    0bde7d4b3da67537eaf9188e6f8049cf
Sha1:   64300fc482d01d38b40ab20e15960b6509665e5a
Sha256: 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9338
Expires: Tue, 29 Nov 2022 21:35:55 GMT
Date: Tue, 29 Nov 2022 19:00:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9338
Expires: Tue, 29 Nov 2022 21:35:55 GMT
Date: Tue, 29 Nov 2022 19:00:17 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:52:21 GMT
age: 50876
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10176
Md5:    03014221d7f49b50ffc2d1b0a0e75457
Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd
Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:55:32 GMT
age: 57885
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jb1eLyzn88lV_UTId-Fl3OnftDn8c7o5j8d16_nzHCNST_68MZ1pvA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:50:08 GMT
age: 76209
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4417
Md5:    a2a5c8d4113d282600462749315f2c4f
Sha1:   e2b4d2e15bb7c086333c0da438873e4c139ba931
Sha256: 9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:01:17 GMT
age: 57540
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4916
Md5:    83c1fedec73299637cc7dc47c48af758
Sha1:   2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9BUuT9WFwAQMnl8JiTDKo-zHgDL0AdjAAAIh0Mx405zbGwhvRouebQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 12:20:15 GMT
age: 24002
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4871
Md5:    a4058fd62595d15c58b3d3266de9865a
Sha1:   d0dff35eb78f129b5da407043037bcf9c27e55c0
Sha256: ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8921
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnwFYToAMFoWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:57:05 GMT
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29"
age: 75792
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8921
Md5:    823e92f62ff7b3c2093828817d7f2866
Sha1:   c501de9eaa581a10b0b5fce40b54bb10f57f7c29
Sha256: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
                                        
                                            GET /files/activity.php HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 22
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 18:57:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    02735d7c4ab0b3f8844d5ce89569a885
Sha1:   a51901ca39dbc909f2a7e1428d600e524ad51870
Sha256: 64880b05404977a7275d83c0c05e0711751718a6a9ac3b47b888d2eb3d75779c

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /files/activity.php HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 22
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 18:57:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    02735d7c4ab0b3f8844d5ce89569a885
Sha1:   a51901ca39dbc909f2a7e1428d600e524ad51870
Sha256: 64880b05404977a7275d83c0c05e0711751718a6a9ac3b47b888d2eb3d75779c

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /files/activity.php HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 22
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 18:58:02 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    02735d7c4ab0b3f8844d5ce89569a885
Sha1:   a51901ca39dbc909f2a7e1428d600e524ad51870
Sha256: 64880b05404977a7275d83c0c05e0711751718a6a9ac3b47b888d2eb3d75779c

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing
                                        
                                            GET /files/activity.php HTTP/1.1 
Host: mynabsecured.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://mynabsecured.com/
Cookie: PHPSESSID=fda32d923f01fe1465c6ae9f8a9f11c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             194.36.191.196
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 22
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 18:58:02 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    02735d7c4ab0b3f8844d5ce89569a885
Sha1:   a51901ca39dbc909f2a7e1428d600e524ad51870
Sha256: 64880b05404977a7275d83c0c05e0711751718a6a9ac3b47b888d2eb3d75779c

urlquery:
  - Phishing - National Australia Bank
Blocklists:
  - openphish: National Australia Bank Limited
  - fortinet: Phishing