Report - getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV

Report Overview

Visitedpublic

2025-03-11 17:59:52

Tags

Submit Tags

URL

getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV

Finishing URL

getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV

IP / ASN

United States

34.237.253.202

#14618 AMAZON-AES

Title

lt.php (GIF Image, 1 × 1 pixels)

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
getupeducation.acemlna.com	unknown	2015-09-17	2025-01-14	2025-02-26	591 B	1.2 kB	54.225.69.136
getupeducation.activehosted.com	unknown	2004-09-01	2025-01-13	2025-03-11	1.4 kB	2.5 kB	104.17.203.31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	GET getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV	54.225.69.136	307 Temporary Redirect	807 B
URL User Request GET HTTPS getupeducation.acemlna.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV IP / ASN 54.225.69.136 #14618 AMAZON-AES Requested byN/A Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-06 Times Seen5691118 Size807 B (807 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerAmazon Subjectacemlna.com FingerprintFD:9B:9A:76:5B:A4:8F:F9:23:47:08:41:AF:60:43:03:1A:6C:52:1D ValidityThu, 12 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT HTTP Headers GET /lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV HTTP/1.1 Host: getupeducation.acemlna.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 307 Temporary Redirect cache-control: public, max-age=2628000 location: https://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV date: Tue, 11 Mar 2025 17:59:30 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: istio-envoy X-Firefox-Spdy: h2`

	GET getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV	104.17.203.31	200 OK	807 B
URL User Request GET HTTPS getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV IP / ASN 104.17.203.31 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeGIF image data, version 89a, 1 x 1 First Seen2023-11-30 Last Seen2025-07-14 Times Seen58 Size807 B (807 bytes) MD5e3c2e7d3e3eaf63a0cc861df4e8a0ab9 SHA1fe01dcd98fa0fb5e6b903ae330e4d1f5413fd65c SHA25675f2a50dc18057fb973409ed9e80aa6f8fdaa0629e034f13c3b278b6781a9003 Certificate Info IssuerGoogle Trust Services Subjectactivehosted.com Fingerprint7D:45:97:CA:54:C0:5A:E3:AA:E1:F4:AA:C8:FA:87:42:7A:DE:7F:49 ValiditySat, 01 Feb 2025 00:01:04 GMT - Fri, 02 May 2025 01:01:02 GMT HTTP Headers GET /lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV HTTP/1.1 Host: getupeducation.activehosted.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Tue, 11 Mar 2025 17:59:31 GMT content-type: image/gif content-length: 807 cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-privacy-policy: You can find our privacy policy here: https://www.activecampaign.com/help/privacy-policy/ x-request-id: b9f1180b599ced319a31fca5bf044578 x-robots-tag: noindex cf-cache-status: DYNAMIC set-cookie: PHPSESSID=cf5ed9d55e8b17d687e8b748c375e790; path=/; secure; HttpOnly; SameSite=Lax __cf_bm=AhYL7TCPjh.RBDNKboPB89uGaVlqjvkpuioNHqq9n8I-1741715971-1.0.1.1-9quBZJNsGdX6X_OcoJh42akvzIqqvc399pvSH16IbQmzD1wEH4_gTi4Q6BCb4z_BMOGUGusnWJzX8bw3YHT4JpGRZWQdAQgkxJhz6V877ck; path=/; expires=Tue, 11-Mar-25 18:29:31 GMT; domain=.activehosted.com; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=63072000; includeSubDomains; preload server: cloudflare cf-ray: 91ecf2302d3556bf-OSL X-Firefox-Spdy: h2

	GET getupeducation.activehosted.com/favicon.ico	104.17.203.31	404 Not Found	325 B
URL GET HTTPS getupeducation.activehosted.com/favicon.ico IP / ASN 104.17.203.31 #13335 CLOUDFLARENET Requested byhttps://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV Resource Info File typeASCII text, with very long lines (338), with no line terminators First Seen2023-09-28 Last Seen2025-03-27 Times Seen83 Size325 B (325 bytes) MD534c0224371c54b8c9bcf918109041c9d SHA154cc94c7324c65e9089b7939330168321081c6a1 SHA256986af46b77ae6e4329456950fa7854d19edfe9b7ce14d8c9d399e5891235aad2 Certificate Info IssuerGoogle Trust Services Subjectactivehosted.com Fingerprint7D:45:97:CA:54:C0:5A:E3:AA:E1:F4:AA:C8:FA:87:42:7A:DE:7F:49 ValiditySat, 01 Feb 2025 00:01:04 GMT - Fri, 02 May 2025 01:01:02 GMT HTTP Headers GET /favicon.ico HTTP/1.1 Host: getupeducation.activehosted.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://getupeducation.activehosted.com/lt.php?x=41Zi05PMInYKHhVp-NDKheSe167TvAT3j-k4YaPHKnGb5pF.zdQ9gRSg1KGRxEMtzhptzK55JXCZ5e83~E5GUeV Cookie: PHPSESSID=cf5ed9d55e8b17d687e8b748c375e790; __cf_bm=AhYL7TCPjh.RBDNKboPB89uGaVlqjvkpuioNHqq9n8I-1741715971-1.0.1.1-9quBZJNsGdX6X_OcoJh42akvzIqqvc399pvSH16IbQmzD1wEH4_gTi4Q6BCb4z_BMOGUGusnWJzX8bw3YHT4JpGRZWQdAQgkxJhz6V877ck Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found date: Tue, 11 Mar 2025 17:59:32 GMT content-type: text/html; charset=UTF-8 x-robots-tag: noindex cf-cache-status: HIT expires: Tue, 11 Mar 2025 21:59:32 GMT cache-control: public, max-age=14400 vary: Accept-Encoding strict-transport-security: max-age=63072000; includeSubDomains; preload server: cloudflare cf-ray: 91ecf23a5f9756bf-OSL content-encoding: gzip X-Firefox-Spdy: h2`