Security Scan Report: oga.fasah.sa

Redirected to:
https://oga.fasah.sa/ar/login/1.0/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 34 IPs in 3 countries across 17 domains to perform 161 HTTP transactions. The main domain is fasah.sa.

Submitted URL: https://oga.fasah.sa

Effective URL:
https://oga.fasah.sa/ar/login/1.0/
Redirected

The Cisco Umbrella rank of the primary domain is #356,857 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Self-branded Fasah login page on its own domain with same-origin credential form, no exfiltration and no threat-intel hits; only a circular SSO redirect, a weak signal. Low risk.

Risk Factors (1)
Circular redirect on the login URL (possible misconfigured SSO loop) — a weak/moderate signal that does not by itself indicate phishing
Safety Factors (5)
Self-branding: page title and content match the host domain fasah.sa
Credential form is same-origin with no external submission or exfiltration
No Indicators of Compromise, hunting rule, Safe Browsing or IDS hits
Third-party scripts limited to mainstream analytics/maps hosts
Content is a standard national single-sign-on and account login page, consistent with a government/logistics portal
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'oga.fasah.sa' uses the Saudi country-code top-level domain (.sa) and includes subdomain 'oga'. The core label 'fasah' covers 5 characters holding 2 vowels versus 3 consonants. It segments into 2 words: fa, sah. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://oga.fasah.sa

Page Load Overview

13.23s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:60%
Script:Arabic
Direction:rtl

Detection Details

Text Length:515 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service50% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
50%
finance banking
47%
adult content
43%
technology software
42%
healthcare medical
39%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29185.117.128.208Saudi Arabia
AS203378General Authority of ZAKAT & TAX
4104.18.16.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
418.66.102.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4172.217.116.4Google · CDNUnited States
AS15169Google LLC
4185.117.129.207Saudi Arabia
AS203378General Authority of ZAKAT & TAX
4142.251.14.138Google · CDNUnited States
AS15169Google LLC
465.9.130.127Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
418.66.112.15Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
16134--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14CC283037D29C60B9B520AE4F272FA9D9126D61BDE91CC98B5DC037D3FD9ED8480E528

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:leR1b/uyCyXgl/fRKa/4B+pIkCJL1d+h+F:gR1vCyXE/fReM+F

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27531:WAABwGI4AOHQmCilpFdFAJfIgEFmg+JwATbiSUAE/aRVFBYUYiIhgUSwQMXgCg0REMAyJWIaHOACApBFYACBABRRQx0tigQO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0f0faf0f0f8f0f0
Perceptual Hash:cda5684549b7936a
Difference Hash:8306020212020602
Wavelet Hash:f0f0f0f0f0f0f0f0
Color Hash:07007000080

Scan History

Scan history not available

Unable to load historical scan data