Report - omakanta.nibrasfull.sa/NRD/

Report Overview

Submitted URL
omakanta.nibrasfull.sa/NRD/
IP
50.87.179.149
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-17 23:37:35
Access
public
Website Title
Nordea - Identification
Final URL
omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Tags
nordea financial phishing
urlquery detections
Phishing - Nordea

Detections

urlquery
13
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
omakanta.nibrasfull.sa	unknown	unknown	2024-04-16	2024-04-17	15 kB	322 kB	50.87.179.149
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-17	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	omakanta.nibrasfull.sa/NRD/	Nordea Bank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	omakanta.nibrasfull.sa/NRD/35b0bce/Folder/jquery.js	88 kB	2023-06-09	2024-04-30
Pretty URL omakanta.nibrasfull.sa/NRD/35b0bce/Folder/jquery.js IP 50.87.179.149 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-09 23:20:42 Last Seen2024-04-30 02:02:35 Times Seen628 Hash ed4e85ddc6e188c8490191794776f22e 83b9249bbbcd563eef7546291d0407f0e70166ce 8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a Loading...

	omakanta.nibrasfull.sa/NRD/35b0bce/Folder/main.js	1.4 kB	2023-12-08	2024-04-18
Pretty URL omakanta.nibrasfull.sa/NRD/35b0bce/Folder/main.js IP 50.87.179.149 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 19:56:46 Last Seen2024-04-18 07:46:44 Times Seen124 Hash af5862f75b53b9ed5bf79096b10266d2 c052d666510449427eb7a4446e2f0489985a8ea9 e86025bf226d3921ed13a8ed54a7b72051dfda0e05a73cdeb9c01779bfd5c653 Loading...

	omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php	200 B	2023-03-26	2024-04-18
Pretty URL omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php IP 50.87.179.149 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 10:44:15 Last Seen2024-04-18 07:46:44 Times Seen142 Hash b7fb1c4198f7856f5c63f7a8e7da9bb2 df0c8d41871c3c65afc04b1d2a2f3b0a53e575d0 b2bb58a6bb04f9183456611be6d920ec3475604f7e8b62be1fe78bfd0770125d Loading...

HTTP Transactions (29)

URL IP Response Size

omakanta.nibrasfull.sa/NRD/

50.87.179.149

0 B

URL
omakanta.nibrasfull.sa/NRD/
IP
50.87.179.149:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Nordea Bank

HTTP Headers

GET /NRD/ HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: 35b0bce
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:10 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce

50.87.179.149

301 Moved Permanently

251 B

URL User Request GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
HTML document, ASCII text
Size
251 B (251 bytes)
Hash
d915b5f7864346938f71d6fa58aaa156
6c6eb5ab2938389fb0d4dd0cf5e65aeb9d60e1e3
b96b2372209ab9c6a2ec23e1d0eefbe31214c662e035acea80c65506fedb931a

HTTP Headers

GET /NRD/35b0bce HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
location: https://omakanta.nibrasfull.sa/NRD/35b0bce/
content-length: 251
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 23:37:10 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/

50.87.179.149

302 Found

24 B

URL User Request GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
ASCII text, with no line terminators
Size
24 B (24 bytes)
Hash
0cf31b2c283ce3431794586df7b0996d
65aea98c57dcd2a1ffb0d35ca20603caaf7d9f03
1a0f564ddc6039457b2fb26b3d6a316c15eba20a886449847c3210c35821a693

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/ HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
location: ./Sign_in.php
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 24
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:10 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/main.js

50.87.179.149

603 B

URL
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/main.js
IP
50.87.179.149:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JavaScript source, ASCII text
Size
603 B (603 bytes)
Hash
af5862f75b53b9ed5bf79096b10266d2
c052d666510449427eb7a4446e2f0489985a8ea9
e86025bf226d3921ed13a8ed54a7b72051dfda0e05a73cdeb9c01779bfd5c653

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/Folder/main.js HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 603
content-type: application/javascript
date: Wed, 17 Apr 2024 23:37:11 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/style.css

50.87.179.149

200 OK

157 kB

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/style.css
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
gzip compressed data, from Unix
Size
157 kB (156627 bytes)
Hash
2a776623937821a1d9270a030398535e
6b077ee9ae98444c24047a21d14d725ba95c3362
11a865f95fda32c0990feffa0aa95061b8c08beea8e3ba3e375cb1efe80296ef

HTTP Headers

GET /NRD/35b0bce/Folder/style.css HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Wed, 17 Apr 2024 23:37:11 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/jquery.js

50.87.179.149

200 OK

44 kB

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/jquery.js
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
gzip compressed data, from Unix
Size
44 kB (44392 bytes)
Hash
686048026bc4f895321d620f7d5ac64c
886308cdd4774f58e48afb6d93577148ee1a867f
dd85999af1f9ef85e7ba37249a2458dc92a12210a137af38b24a6de22354d7bb

HTTP Headers

GET /NRD/35b0bce/Folder/jquery.js HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Wed, 17 Apr 2024 23:37:11 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg

50.87.179.149

200 OK

69 kB

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x300, components 3
Size
69 kB (68574 bytes)
Hash
5dbb8bc48bceea15838b7a4f36dffdd1
a6c66aed2ca319d837ad73d92f8e429baa86e3d8
b0ca988c2a45c3ce7d0c8b7f384fff8297fca1513f4a5b9df54a9e4e36390bed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/Folder/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Folder/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
content-length: 68574
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Wed, 17 Apr 2024 23:37:12 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg

50.87.179.149

200 OK

1.7 kB

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
SVG Scalable Vector Graphics image
Size
1.7 kB (1724 bytes)
Hash
28abb007069a4e48b1a0830fb5d4a822
0076bce33117d255676fa9d36dbb96b5a6d911c3
f0dd565f9257ed5f2b92bcdf9fffeb6b057829269c5a5c60033f89402b372b1a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/Folder/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Folder/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
content-length: 1724
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/svg+xml
date: Wed, 17 Apr 2024 23:37:12 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Folder/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg

50.87.179.149

200 OK

3.9 kB

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Folder/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
SVG Scalable Vector Graphics image
Size
3.9 kB (3919 bytes)
Hash
d2c5355e1fcc507cd7b7389e87e6c9de
950e8594a7f7eeaf1ab24c2146c3fca3f6e03b29
9f447470aba212c3bf9d926893df1219f82f5ea14fb495658af56d6ab22c9697

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/Folder/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Folder/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 17 Apr 2024 23:37:10 GMT
accept-ranges: bytes
content-length: 3919
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/svg+xml
date: Wed, 17 Apr 2024 23:37:12 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b; path=/
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:13 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:14 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:15 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php

50.87.179.149

200 OK

38 kB

URL User Request GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3852), with CRLF line terminators
Size
38 kB (37879 bytes)
Hash
9f8bf2fc5c66f15d97b9b51715971aa2
f1107ede24ae748eb68bc2da77ffa5ed91fbc9c8
fe5acf95fbe82625ce781946681ed541ad23b851ac26e7a4b0b0abf375c23904

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /NRD/35b0bce/Sign_in.php HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:10 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:17 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:18 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:19 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:20 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:21 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:22 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:23 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:24 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:25 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:26 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:27 GMT
server: Apache
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=3DGiCu5ClzwvOVqeeuiOMOCiCux2VBQzgbBkS0JtmLKSWuVCoRrmba8d7BGLblkvvLgfHRmabWDMDg0oG8E5ncTHuDs5iSImMBqK8ePyCqXE7Znu5QUh_pP3le1_idfe
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
content-length: 444
date: Wed, 17 Apr 2024 23:37:21 GMT
age: 7
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:28 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:29 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:30 GMT
server: Apache
X-Firefox-Spdy: h2

omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login

50.87.179.149

200 OK

0 B

URL GET HTTP/2
omakanta.nibrasfull.sa/NRD/35b0bce/Account/request/Time_Online.php?Online=Login
IP
50.87.179.149:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Certificate
IssuerLet's Encrypt
Subjectomakanta.nibrasfull.sa
Fingerprint38:B0:0C:34:DC:99:62:B6:F4:8B:C0:74:DD:23:A1:A7:AE:A2:55:32
ValidityTue, 16 Apr 2024 16:53:27 GMT - Mon, 15 Jul 2024 16:53:26 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /NRD/35b0bce/Account/request/Time_Online.php?Online=Login HTTP/1.1
Host: omakanta.nibrasfull.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://omakanta.nibrasfull.sa/NRD/35b0bce/Sign_in.php
Cookie: PHPSESSID=62d28d7bd465517f4e5734e3b859154b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:37:31 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections