Report - getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV

Report Overview

Visited public
2025-03-11 17:59:52
Tags
URL
getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV
Finishing URL
getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV
IP / ASN
34.237.253.202
#14618 AMAZON-AES
Title
lt.php (GIF Image, 1 × 1 pixels)

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
getupeducation.acemlna.com	unknown	2015-09-17	2025-01-14	2025-02-26	591 B	1.2 kB	54.225.69.136
getupeducation.activehosted.com	unknown	2004-09-01	2025-01-13	2025-03-11	1.4 kB	2.5 kB	104.17.203.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV	54.225.69.136	307 Temporary Redirect	807 B
URL User Request GET getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV IP 54.225.69.136:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectacemlna.com FingerprintFD:9B:9A:76:5B:A4:8F:F9:23:47:08:41:AF:60:43:03:1A:6C:52:1D ValidityThu, 12 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT File type Size 807 B (807 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV HTTP/1.1 Host: getupeducation.acemlna.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 307 Temporary Redirect cache-control: public, max-age=2628000 location: https://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV date: Tue, 11 Mar 2025 17:59:30 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: istio-envoy X-Firefox-Spdy: h2`

	getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV	104.17.203.31	200 OK	807 B
URL User Request GET getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV IP 104.17.203.31:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectactivehosted.com Fingerprint7D:45:97:CA:54:C0:5A:E3:AA:E1:F4:AA:C8:FA:87:42:7A:DE:7F:49 ValiditySat, 01 Feb 2025 00:01:04 GMT - Fri, 02 May 2025 01:01:02 GMT File type GIF image data, version 89a, 1 x 1 Size 807 B (807 bytes) Hash e3c2e7d3e3eaf63a0cc861df4e8a0ab9 fe01dcd98fa0fb5e6b903ae330e4d1f5413fd65c 75f2a50dc18057fb973409ed9e80aa6f8fdaa0629e034f13c3b278b6781a9003 HTTP Headers GET /lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV HTTP/1.1 Host: getupeducation.activehosted.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Tue, 11 Mar 2025 17:59:31 GMT content-type: image/gif content-length: 807 cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-privacy-policy: You can find our privacy policy here: https://www.activecampaign.com/help/privacy-policy/ x-request-id: b9f1180b599ced319a31fca5bf044578 x-robots-tag: noindex cf-cache-status: DYNAMIC set-cookie: PHPSESSID=cf5ed9d55e8b17d687e8b748c375e790; path=/; secure; HttpOnly; SameSite=Lax __cf_bm=AhYL7TCPjh.RBDNKboPB89uGaVlqjvkpuioNHqq9n8I-1741715971-1.0.1.1-9quBZJNsGdX6X_OcoJh42akvzIqqvc399pvSH16IbQmzD1wEH4_gTi4Q6BCb4z_BMOGUGusnWJzX8bw3YHT4JpGRZWQdAQgkxJhz6V877ck; path=/; expires=Tue, 11-Mar-25 18:29:31 GMT; domain=.activehosted.com; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=63072000; includeSubDomains; preload server: cloudflare cf-ray: 91ecf2302d3556bf-OSL X-Firefox-Spdy: h2

	getupeducation.activehosted.com/favicon.ico	104.17.203.31	404 Not Found	325 B
URL GET getupeducation.activehosted.com/favicon.ico IP 104.17.203.31:443 ASN #13335 CLOUDFLARENET Requested by https://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV Certificate IssuerGoogle Trust Services Subjectactivehosted.com Fingerprint7D:45:97:CA:54:C0:5A:E3:AA:E1:F4:AA:C8:FA:87:42:7A:DE:7F:49 ValiditySat, 01 Feb 2025 00:01:04 GMT - Fri, 02 May 2025 01:01:02 GMT File type ASCII text, with very long lines (338), with no line terminators Size 325 B (325 bytes) Hash 34c0224371c54b8c9bcf918109041c9d 54cc94c7324c65e9089b7939330168321081c6a1 986af46b77ae6e4329456950fa7854d19edfe9b7ce14d8c9d399e5891235aad2 HTTP Headers GET /favicon.ico HTTP/1.1 Host: getupeducation.activehosted.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV Cookie: PHPSESSID=cf5ed9d55e8b17d687e8b748c375e790; __cf_bm=AhYL7TCPjh.RBDNKboPB89uGaVlqjvkpuioNHqq9n8I-1741715971-1.0.1.1-9quBZJNsGdX6X_OcoJh42akvzIqqvc399pvSH16IbQmzD1wEH4_gTi4Q6BCb4z_BMOGUGusnWJzX8bw3YHT4JpGRZWQdAQgkxJhz6V877ck Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found date: Tue, 11 Mar 2025 17:59:32 GMT content-type: text/html; charset=UTF-8 x-robots-tag: noindex cf-cache-status: HIT expires: Tue, 11 Mar 2025 21:59:32 GMT cache-control: public, max-age=14400 vary: Accept-Encoding strict-transport-security: max-age=63072000; includeSubDomains; preload server: cloudflare cf-ray: 91ecf23a5f9756bf-OSL content-encoding: gzip X-Firefox-Spdy: h2`