Report - my03.awfatech.com/main/appstudent/adm/index.php

Report Overview

Visited public
2024-09-27 06:15:38
Tags
URL
my03.awfatech.com/main/appstudent/adm/index.php
Finishing URL
my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp=
IP / ASN
103.4.7.238
#45144 Net Onboard Sdn Bhd - Quality & Reliable Cloud Hosting Provider
Title
my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp=

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-26 18:37:25	1.3 kB	3.6 kB	23.36.76.226
my03.awfatech.com	unknown	2011-02-01	2017-05-08 11:05:31	2023-01-31 00:57:01	1.7 kB	4.6 kB	103.4.7.238
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-26 18:37:24	1.3 kB	3.5 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (11)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b6ecb6018a51380d08a47460236a395c 1ce7fe77c21188624302a660a289fe1ce6e7a9e4 ec876edd163ea26b47c9b862c795844f5dd01452095287ea5cd920e3b512672a HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "EC876EDD163EA26B47C9B862C795844F5DD01452095287EA5CD920E3B512672A" Last-Modified: Wed, 25 Sep 2024 21:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8590 Expires: Fri, 27 Sep 2024 08:38:23 GMT Date: Fri, 27 Sep 2024 06:15:13 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 4d7d2c93c05c23af00bdd2de1aa8def8 5d690fe96336335097f6edc39f269282fc0c03d5 ad3bf98d190e8a00b304b608273e81b0d73805059020c0e08e318194738dbe08 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "AD3BF98D190E8A00B304B608273E81B0D73805059020C0E08E318194738DBE08" Last-Modified: Wed, 25 Sep 2024 00:20:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12517 Expires: Fri, 27 Sep 2024 09:43:50 GMT Date: Fri, 27 Sep 2024 06:15:13 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 768761e53ad39c95f09ec6c9de7989cc 31d0f05bea586379994ae7e3f61a21056d7a5e7b 8fd52d4f5d960ee5ba1feaaa373e59539169938306bf53e6dc905b9a3aff1742 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "8FD52D4F5D960EE5BA1FEAAA373E59539169938306BF53E6DC905B9A3AFF1742" Last-Modified: Fri, 27 Sep 2024 00:31:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18521 Expires: Fri, 27 Sep 2024 11:23:54 GMT Date: Fri, 27 Sep 2024 06:15:13 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 51a45c4d7c6a4157f0fc92c2b6e3b6fa da42e65eb69e43b6691b3f4cc88302d81779a8e1 d5c222286765e84de5de422e2b57d9f51173aba2934ded5a2ed579794b7b3604 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "D5C222286765E84DE5DE422E2B57D9F51173ABA2934DED5A2ED579794B7B3604" Last-Modified: Fri, 27 Sep 2024 01:36:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12450 Expires: Fri, 27 Sep 2024 09:42:43 GMT Date: Fri, 27 Sep 2024 06:15:13 GMT Connection: keep-alive`

	my03.awfatech.com/main/appstudent/adm/index.php	103.4.7.238		384 B
URL my03.awfatech.com/main/appstudent/adm/index.php IP 103.4.7.238:0 ASN #45144 Net Onboard Sdn Bhd - Quality & Reliable Cloud Hosting Provider File type HTML document, ASCII text Size 384 B (384 bytes) Hash d30e742b6073d138011d0fe2ce392f5d 17357e501700bc01d5ad4a0e0f0222a1b17d8351 63bf0644def2bcf5bcc381b1c2c05be4d75e5d0c374a423ebce749db13f19b1d HTTP Headers `GET /main/appstudent/adm/index.php HTTP/1.1 Host: my03.awfatech.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:15:13 GMT Server: Apache X-Powered-By: PHP/5.4.40 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Referrer-Policy: same-origin Feature-Policy: microphone 'none'; payment 'none'; sync-xhr 'self' https://my03.awfatech.com X-Xss-Protection: 1; mode=block Set-Cookie: appparent=57f6be163a097ee4c33bd29ad20684ec; path=/; HttpOnly;Secure;Samesite=strict X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maps.googleapis.com https://ajax.googleapis.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://rawgit.com;style-src 'self' https://my03.awfatech.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://cdn.materialdesignicons.com 'unsafe-inline' https://fonts.googleapis.com;connect-src ; font-src 'self' https://my03.awfatech.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://cdn.materialdesignicons.com; img-src * 'self' data: https:;form-action 'self' https://mobigate.awfatech.com https://pgw1.awfatech.com;plugin-types application/pdf;object-src 'self';child-src 'self' https://www.macromedia.com/;frame-src 'self' https://www.macromedia.com/; X-Robots-Tag: noindex, noarchive, nosnippet Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html

	my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp=	103.4.7.238	200 OK	147 B
URL User Request GET HTTP/1.1 my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp= IP 103.4.7.238:443 ASN #45144 Net Onboard Sdn Bhd - Quality & Reliable Cloud Hosting Provider Certificate IssuerSectigo Limited Subject.awfatech.com Fingerprint9D:B3:EA:78:8C:3E:D5:10:72:82:0E:FB:C0:52:03:19:DA:36:51:A7 ValidityThu, 14 Sep 2023 00:00:00 GMT - Sun, 13 Oct 2024 23:59:59 GMT File type ASCII text Size 147 B (147 bytes) Hash 99126cb86d054bb8e0a35790a65ad7d0 e22fe9f559f3575af4254f39ad7415362dfeeec7 9b5d46994baff522e3fb9250ba4d910e425b00f11432481ae9c32f6519357e5c HTTP Headers GET /main/appstudent/adm/session_lost.php?sysapp= HTTP/1.1 Host: my03.awfatech.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://my03.awfatech.com/main/appstudent/adm/index.php DNT: 1 Connection: keep-alive Cookie: appparent=57f6be163a097ee4c33bd29ad20684ec Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 06:15:14 GMT Server: Apache X-Powered-By: PHP/5.4.40 Referrer-Policy: same-origin Feature-Policy: microphone 'none'; payment 'none'; sync-xhr 'self' https://my03.awfatech.com X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maps.googleapis.com https://ajax.googleapis.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://rawgit.com;style-src 'self' https://my03.awfatech.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://cdn.materialdesignicons.com 'unsafe-inline' https://fonts.googleapis.com;connect-src ; font-src 'self' https://my03.awfatech.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.rawgit.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://cdn.materialdesignicons.com; img-src 'self' data: https:;form-action 'self' https://mobigate.awfatech.com https://pgw1.awfatech.com;plugin-types application/pdf;object-src 'self';child-src 'self' https://www.macromedia.com/;frame-src 'self' https://www.macromedia.com/; X-Robots-Tag: noindex, noarchive, nosnippet Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html

	my03.awfatech.com/favicon.ico	103.4.7.238	404 Not Found	328 B
URL GET HTTP/1.1 my03.awfatech.com/favicon.ico IP 103.4.7.238:443 ASN #45144 Net Onboard Sdn Bhd - Quality & Reliable Cloud Hosting Provider Requested by https://my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp= Certificate IssuerSectigo Limited Subject.awfatech.com Fingerprint9D:B3:EA:78:8C:3E:D5:10:72:82:0E:FB:C0:52:03:19:DA:36:51:A7 ValidityThu, 14 Sep 2023 00:00:00 GMT - Sun, 13 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 328 B (328 bytes) Hash 301fa7ceb5b3c291d4bbeee953048686 758d921efd60d4e9f0f6d77648ccc500c8611fea 6b62a3658ad247e8f30d3e9f35da5e00ffac1ea09785bd1f0a9830f659cf01da HTTP Headers GET /favicon.ico HTTP/1.1 Host: my03.awfatech.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://my03.awfatech.com/main/appstudent/adm/session_lost.php?sysapp= DNT: 1 Connection: keep-alive Cookie: appparent=57f6be163a097ee4c33bd29ad20684ec Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 06:15:15 GMT Server: Apache Referrer-Policy: same-origin Feature-Policy: microphone 'none'; payment 'none'; sync-xhr 'self' https://my03.awfatech.com X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 328 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8079 Expires: Fri, 27 Sep 2024 08:29:54 GMT Date: Fri, 27 Sep 2024 06:15:15 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8079 Expires: Fri, 27 Sep 2024 08:29:54 GMT Date: Fri, 27 Sep 2024 06:15:15 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8079 Expires: Fri, 27 Sep 2024 08:29:54 GMT Date: Fri, 27 Sep 2024 06:15:15 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.77.32		504 B
URL r11.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8079 Expires: Fri, 27 Sep 2024 08:29:54 GMT Date: Fri, 27 Sep 2024 06:15:15 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers