Report - lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef

Report Overview

Submitted URL
lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
IP
148.72.208.241
ASN
#26496 AS-26496-GO-DADDY-COM-LLC
Submitted
2023-05-10 09:17:31
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.lakshayeducation.com	unknown	2008-05-01	2017-11-19	2023-05-10	2.6 kB	1.7 kB	148.72.208.241
lakshayeducation.com	unknown	2008-05-01	2017-01-23	2023-05-10	657 B	798 B	148.72.208.241

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-10 09:17:16	high	Client IP	148.72.208.241	ET PHISHING Generic Phishkit Activity (GET)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef

148.72.208.241

301 Moved Permanently

344 B

URL User Request GET HTTP/2
lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
IP
148.72.208.241:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Certificate
IssuerLet's Encrypt
Subjectlakshayeducation.com
Fingerprint0B:27:D7:37:09:FA:BF:6A:AB:0E:9A:2F:E1:8F:D0:D2:7B:D9:AA:CE
ValidityTue, 14 Feb 2023 19:11:45 GMT - Mon, 15 May 2023 19:11:44 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (301)
Size
344 B (344 bytes)
Hash
785eaaddfb12714dd6c9f98bea3d970d
1b3200fc5ec6099038c9d57a58326843d16f7d92
e85d6e3e077774639c8245fd537d1d233c419cdbc72d63fa2e377acc31715750

HTTP Headers

GET /excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef HTTP/1.1
Host: lakshayeducation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
location: https://www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Wed, 10 May 2023 08:12:12 GMT
content-length: 344
X-Firefox-Spdy: h2

www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef

148.72.208.241

404 Not Found

103 B

URL User Request GET HTTP/2
www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
IP
148.72.208.241:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Certificate
IssuerLet's Encrypt
Subjectlakshayeducation.com
Fingerprint0B:27:D7:37:09:FA:BF:6A:AB:0E:9A:2F:E1:8F:D0:D2:7B:D9:AA:CE
ValidityTue, 14 Feb 2023 19:11:45 GMT - Mon, 15 May 2023 19:11:44 GMT

File type
ASCII text, with no line terminators
Size
103 B (103 bytes)
Hash
96c5637e1eb8f8f8c34172f2d23eafc6
2a416f86c3c9e26f9c34bf1f8b1bb5daa46e86f9
90b2d35cd5e08370ed20db81197dd9da1a4dbb421f71293fd5733ea49eb7b3e1

Detections

NIDS	Severity	Alert
suricata	high	ET PHISHING Generic Phishkit Activity (GET)

HTTP Headers

GET /excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef HTTP/1.1
Host: www.lakshayeducation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Wed, 10 May 2023 08:12:13 GMT
content-length: 103
X-Firefox-Spdy: h2

148.72.208.241

404 Not Found

344 B

URL User Request GET HTTP/2
www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
IP
148.72.208.241:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Certificate
IssuerLet's Encrypt
Subjectlakshayeducation.com
Fingerprint0B:27:D7:37:09:FA:BF:6A:AB:0E:9A:2F:E1:8F:D0:D2:7B:D9:AA:CE
ValidityTue, 14 Feb 2023 19:11:45 GMT - Mon, 15 May 2023 19:11:44 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (301)
Size
344 B (344 bytes)
Hash
785eaaddfb12714dd6c9f98bea3d970d
1b3200fc5ec6099038c9d57a58326843d16f7d92
e85d6e3e077774639c8245fd537d1d233c419cdbc72d63fa2e377acc31715750

Detections

NIDS	Severity	Alert
suricata	high	ET PHISHING Generic Phishkit Activity (GET)

HTTP Headers

GET /excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef HTTP/1.1
Host: www.lakshayeducation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Wed, 10 May 2023 08:12:13 GMT
Content-Length: 344

148.72.208.241

404 Not Found

103 B

URL User Request GET HTTP/2
www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
IP
148.72.208.241:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Certificate
IssuerLet's Encrypt
Subjectlakshayeducation.com
Fingerprint0B:27:D7:37:09:FA:BF:6A:AB:0E:9A:2F:E1:8F:D0:D2:7B:D9:AA:CE
ValidityTue, 14 Feb 2023 19:11:45 GMT - Mon, 15 May 2023 19:11:44 GMT

File type
ASCII text, with no line terminators
Size
103 B (103 bytes)
Hash
96c5637e1eb8f8f8c34172f2d23eafc6
2a416f86c3c9e26f9c34bf1f8b1bb5daa46e86f9
90b2d35cd5e08370ed20db81197dd9da1a4dbb421f71293fd5733ea49eb7b3e1

Detections

NIDS	Severity	Alert
suricata	high	ET PHISHING Generic Phishkit Activity (GET)

HTTP Headers

GET /excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef HTTP/1.1
Host: www.lakshayeducation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Wed, 10 May 2023 08:12:13 GMT
content-length: 103
X-Firefox-Spdy: h2

www.lakshayeducation.com/favicon.ico

148.72.208.241

404 Not Found

103 B

URL GET HTTP/2
www.lakshayeducation.com/favicon.ico
IP
148.72.208.241:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
Certificate
IssuerLet's Encrypt
Subjectlakshayeducation.com
Fingerprint0B:27:D7:37:09:FA:BF:6A:AB:0E:9A:2F:E1:8F:D0:D2:7B:D9:AA:CE
ValidityTue, 14 Feb 2023 19:11:45 GMT - Mon, 15 May 2023 19:11:44 GMT

File type
ASCII text, with no line terminators
Size
103 B (103 bytes)
Hash
96c5637e1eb8f8f8c34172f2d23eafc6
2a416f86c3c9e26f9c34bf1f8b1bb5daa46e86f9
90b2d35cd5e08370ed20db81197dd9da1a4dbb421f71293fd5733ea49eb7b3e1

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.lakshayeducation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lakshayeducation.com/excel/Excell/login.php?cmd=login_submit&id=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef&session=4f9d129864f1dae024b5ce0598af98ef4f9d129864f1dae024b5ce0598af98ef
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Wed, 10 May 2023 08:12:14 GMT
content-length: 103
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers