Report - www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician

Report Overview

Visitedpublic

2024-08-25 12:19:29

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.gaincity.com	unknown	1998-07-08	2014-08-06 05:21:17	2024-03-13 18:07:37	3.6 kB	48 kB	172.66.42.220
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-24 18:12:09	981 B	2.7 kB	23.36.76.226
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-24 18:12:06	981 B	2.7 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600	ScriptElement	0 B	0001-01-01	2025-08-02
URL www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600 IP / ASN 172.66.42.220 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606118 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600	ScriptElement	393 B	2023-04-05	2025-03-02
URL www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600 IP / ASN 172.66.42.220 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-04-05 Last Seen 2025-03-02 Times Seen 143291 Size 393 B (393 bytes) MD5 34ad0a116707d3b794129a6720af92d7 SHA1 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 SHA256 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Format Code Loading...

	www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600	ScriptElement	0 B	0001-01-01	2025-08-02
URL www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600 IP / ASN 172.66.42.220 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606118 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

HTTP Transactions (13)

URL IP Response Size

r11.o.lencr.org/

23.36.76.226

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-24

Last Seen2024-08-29

Times Seen14227

Size504 B (504 bytes)

MD5cc687a19f2854a47020b22f4aa1806ef

SHA19d4058393445f64f6dda190557bf37686e19e7a0

SHA256df2db18fa10eeb1d535253183d68a561c6b52b77b539df6a0a36aec736a9da9c

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DF2DB18FA10EEB1D535253183D68A561C6B52B77B539DF6A0A36AEC736A9DA9C"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2490
Expires: Sun, 25 Aug 2024 13:00:33 GMT
Date: Sun, 25 Aug 2024 12:19:03 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-23

Last Seen2024-08-29

Times Seen16095

Size504 B (504 bytes)

MD50116304cb4b20e1766015ee4e636662f

SHA1c2b93f53852c06a7a9648a817818c0d5a7011898

SHA2568d8503dca377a8430cd883acdec16a62201f61ff923847bb95cd00b4b5b76dee

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D8503DCA377A8430CD883ACDEC16A62201F61FF923847BB95CD00B4B5B76DEE"
Last-Modified: Fri, 23 Aug 2024 14:36:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9924
Expires: Sun, 25 Aug 2024 15:04:28 GMT
Date: Sun, 25 Aug 2024 12:19:04 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-24

Last Seen2024-08-29

Times Seen24396

Size504 B (504 bytes)

MD5515f455d93caad6521481d99fc23e623

SHA1cb770c44b3e280f2151b3f5e887d61fbe0ef66fb

SHA256cf43d0127c72bf58a1799b4e7ce0e5c9e18ec12e978df6dac9c17920a20173d5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CF43D0127C72BF58A1799B4E7CE0E5C9E18EC12E978DF6DAC9C17920A20173D5"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2785
Expires: Sun, 25 Aug 2024 13:05:29 GMT
Date: Sun, 25 Aug 2024 12:19:04 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-23

Last Seen2024-08-29

Times Seen15481

Size504 B (504 bytes)

MD544d2fa336203fefa7fcc2e369e453d16

SHA171a006973afdbe2deb2374768a328cf9307fd4d1

SHA256cb3bf00db937121aa64ed4b8047093cd89cb7376a3c66cf46ecb6974ca047d4c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CB3BF00DB937121AA64ED4B8047093CD89CB7376A3C66CF46ECB6974CA047D4C"
Last-Modified: Fri, 23 Aug 2024 14:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11249
Expires: Sun, 25 Aug 2024 15:26:33 GMT
Date: Sun, 25 Aug 2024 12:19:04 GMT
Connection: keep-alive

GET www.gaincity.com/cdn-cgi/apps/head/ivJiiF52KzcvKUurZ3BWCizXIgc.js

172.66.42.220

403 Forbidden

2.3 kB

URL

www.gaincity.com/cdn-cgi/apps/head/ivJiiF52KzcvKUurZ3BWCizXIgc.js

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byhttps://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

Resource Info

File typeHTML document, ASCII text, with very long lines (394)

First Seen2024-08-29

Last Seen2024-08-29

Times Seen1

Size2.3 kB (2333 bytes)

MD570317ccb8b995f9f1966c0a107700260

SHA1a10a1abb04124f40c6d90d33203ed0a3c98c09fe

SHA2560e204853189f34fdcb10fc9b64a9cfa9af8f99b58cbffaac777891cd43b59f1d

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

HTTP Headers

GET /cdn-cgi/apps/head/ivJiiF52KzcvKUurZ3BWCizXIgc.js HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 403 Forbidden
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Sun, 25 Aug 2024 12:19:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pd%2FxJD91rJ2BHZPFUN9wNNudORS9g6%2FWw9YxBhOrIkwzzpGuyfqTNvN5KMntx0BV3PUyGQ6VG8D3WHKm5DphyZQfgdOaqi0s1gQ5fv5A29v11YrapjeZKa94RtldZfNoLC0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b8b87434dc356c3-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET www.gaincity.com/cdn-cgi/images/cf-no-screenshot-error.png

172.66.42.220

200 OK

3.2 kB

URL

www.gaincity.com/cdn-cgi/images/cf-no-screenshot-error.png

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byhttps://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

Resource Info

File typePNG image data, 178 x 175, 8-bit colormap, non-interlaced

First Seen0001-01-01

Last Seen2025-08-02

Times Seen70210

Size3.2 kB (3213 bytes)

MD50d768cbc261841d3affc933b9ac3130e

SHA1aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7

SHA2561c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gaincity.com/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: image/png
content-length: 3213
last-modified: Wed, 21 Aug 2024 12:07:35 GMT
etag: "66c5d887-c8d"
server: cloudflare
cf-ray: 8b8b87438e0b56c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sun, 25 Aug 2024 14:19:04 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.36.76.226

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-23

Last Seen2024-08-29

Times Seen22856

Size504 B (504 bytes)

MD5858eda022f9abab07abe65d5db47bdd7

SHA150676984a7c33451e955b30f0c2796d8cbd39b37

SHA256d5d1370d54dbc79eef9d826334b31217d5b9823cfd1d012036b1bc4f38b724b4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5D1370D54DBC79EEF9D826334B31217D5B9823CFD1D012036B1BC4F38B724B4"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13720
Expires: Sun, 25 Aug 2024 16:07:46 GMT
Date: Sun, 25 Aug 2024 12:19:06 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-23

Last Seen2024-08-29

Times Seen22856

Size504 B (504 bytes)

MD5858eda022f9abab07abe65d5db47bdd7

SHA150676984a7c33451e955b30f0c2796d8cbd39b37

SHA256d5d1370d54dbc79eef9d826334b31217d5b9823cfd1d012036b1bc4f38b724b4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5D1370D54DBC79EEF9D826334B31217D5B9823CFD1D012036B1BC4F38B724B4"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13720
Expires: Sun, 25 Aug 2024 16:07:46 GMT
Date: Sun, 25 Aug 2024 12:19:06 GMT
Connection: keep-alive

GET www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

172.66.42.220

403 Forbidden

4.6 kB

URL

www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (4824), with no line terminators

First Seen2024-08-29

Last Seen2024-08-29

Times Seen1

Size4.6 kB (4587 bytes)

MD5ca31b61c20dfa1fe0e3ef531faf4f77b

SHA1e8351fe8dd1b7496bd7f5df74c08482fb3397c79

SHA256fe4eaeb5d78f8bb1a957d2e683ba226102a4e7cd1602080389340bb0004370b7

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

HTTP Headers

GET /feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600 HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Sun, 25 Aug 2024 12:19:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FMoGl8j2gc0dVh27Tjz2UsmsFrMYhxfByZV1Dik6dhsKL8NrxPHuj8JrGLBflxkZlEp2jbpASp0MhKTxTFOFyNOBOgWj0xWB1GpTgBIhza%2BDJ4W9sbM5X93vBPGucowxjWc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b8b87412b1c56c3-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

172.66.42.220

403 Forbidden

4.6 kB

URL

www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (4824), with no line terminators

First Seen2024-08-29

Last Seen2024-08-29

Times Seen1

Size4.6 kB (4587 bytes)

MD5ff03361f32baf66b4401fadc1232abe6

SHA13e13bbbe56512c7fde04ed8ddbe1533f9b5c8fa1

SHA25651291c5ccf1226eb4b990b553d275f77aeb08952f2d693cdb1136d3251618310

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

HTTP Headers

GET /feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600 HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Sun, 25 Aug 2024 12:19:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KQkiLyrw5EDE%2FE2zMf3DHMHcu9DSi1DsT8JOLUhN9KJXgsecE5QZ5C0pvx2lZ2fiaLvzMCiH1gcgP2cC2puJn1WD%2Ba1NAMf9IiRbV3vLV8GcjSWGI%2B6b73evIV8filFlpm4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b8b8741dc2a56c3-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET www.gaincity.com/cdn-cgi/styles/cf.errors.css

172.66.42.220

200 OK

24 kB

URL

www.gaincity.com/cdn-cgi/styles/cf.errors.css

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byhttps://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

Resource Info

File typeASCII text, with very long lines (24050)

First Seen0001-01-01

Last Seen2025-08-02

Times Seen229566

Size24 kB (24051 bytes)

MD55e8c69a459a691b5d1b9be442332c87d

SHA1f24dd1ad7c9080575d92a9a9a2c42620725ef836

SHA25684e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: text/css
last-modified: Wed, 21 Aug 2024 12:07:35 GMT
etag: W/"66c5d887-5df3"
server: cloudflare
cf-ray: 8b8b87434dcf56c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sun, 25 Aug 2024 14:19:04 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2

GET www.gaincity.com/cdn-cgi/images/browser-bar.png?1376755637

172.66.42.220

200 OK

715 B

URL

www.gaincity.com/cdn-cgi/images/browser-bar.png?1376755637

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byhttps://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

Resource Info

File typePNG image data, 960 x 53, 8-bit colormap, non-interlaced

First Seen0001-01-01

Last Seen2025-08-02

Times Seen70203

Size715 B (715 bytes)

MD5226dcb8f6144bdaafdfbd8f2f354be64

SHA13785cc5b3bf52f8e398177b0ff1020b24aa86b8c

SHA2568c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gaincity.com/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: image/png
content-length: 715
last-modified: Wed, 21 Aug 2024 12:07:35 GMT
etag: "66c5d887-2cb"
server: cloudflare
cf-ray: 8b8b87438e0a56c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sun, 25 Aug 2024 14:19:04 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2

GET www.gaincity.com/favicon.ico

172.66.42.220

403 Forbidden

4.6 kB

URL

www.gaincity.com/favicon.ico

IP / ASN

172.66.42.220

#13335 CLOUDFLARENET

Requested byhttps://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600

Resource Info

File typeHTML document, ASCII text, with very long lines (4824), with no line terminators

First Seen2024-08-29

Last Seen2024-08-29

Times Seen1

Size4.6 kB (4587 bytes)

MD566b8d5a4e67bf533639985ab2025a895

SHA159ad9afd9f07c91c7623691a5fc0234c51b28d6d

SHA256f41f52f7225ea1d2f774e72f2622f8ea6901c8ac611c1d724bb0ef3665040010

Certificate Info

IssuerGoogle Trust Services

Subjectgaincity.com

Fingerprint89:28:82:7C:83:BF:5D:D5:85:09:C2:13:B1:46:23:DF:C4:C9:35:50

ValiditySun, 14 Jul 2024 01:33:33 GMT - Sat, 12 Oct 2024 01:33:32 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.gaincity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.gaincity.com/feedback?doc_rec_type=PKS&pks_no=01373991&salesman_id=11569&technician_id=M-9600
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sun, 25 Aug 2024 12:19:04 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Sun, 25 Aug 2024 12:19:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTz%2BAXBmEowHoD8ciBrjnkC%2FZ7wAvJCFCb1aQ8%2Bil0rHlmr5wGSvI3RWktuJd2SgTxc9diya3%2FcmVgsb5hsTy4RPSYwWwmqfcEkHJj2AchOSYl6BTvA9MoxNXKvbCfGlHo8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b8b8743ae3156c3-OSL
content-encoding: br
X-Firefox-Spdy: h2