Report - mobilegatepayment.com/

Report Overview

Visited public
2025-05-07 21:56:28
Tags
sinkhole suspicious cloudflare
URL
mobilegatepayment.com/
Finishing URL
mobilegatepayment.com/
IP / ASN
104.21.45.112
#13335 CLOUDFLARENET
Title
Attention Required! | Cloudflare
Suspicious - Sinkholed / Blocked

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mobilegatepayment.com	unknown	unknown	No data	No data	2.4 kB	45 kB	104.21.45.112

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	mobilegatepayment.com/	ScriptElement	210 B	2023-03-07	2025-05-26
Pretty URL mobilegatepayment.com/ IP 104.21.45.112 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-26 03:31 Times Seen91746 Hash ab1ac4cf0f484cc9f859c0a7983353e0 2da142b1135bd10cdbed4a7353e4483acc30ebe9 50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324 Loading...

	mobilegatepayment.com/	ScriptElement	375 B	2023-03-07	2025-05-26
Pretty URL mobilegatepayment.com/ IP 104.21.45.112 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-26 03:34 Times Seen94079 Hash 56df91490fa1984fa82b297dcb23c22d 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24 Loading...

	mobilegatepayment.com/	ScriptElement	38 B	2023-03-07	2025-05-26
Pretty URL mobilegatepayment.com/ IP 104.21.45.112 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-26 03:31 Times Seen92321 Hash eb2ee6e4b3d4e81bacdb2474d9b3c2f5 6588855b25c975b224e0fd1b50ca1b3f36cd46ed 3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05 Loading...

HTTP Transactions (6)

URL IP Response Size

mobilegatepayment.com/

104.21.45.112

403 Forbidden

4.5 kB

URL User Request GET
mobilegatepayment.com/
IP
104.21.45.112:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (394)
Size
4.5 kB (4523 bytes)
Hash
c07df04285e39271fba1a3e7a584c0e5
54185bf4727bfb526432799dbcc3e164686dde41
d2003e0fd2ab8cfcc321ab2e440a7c60ced2615915218074ea3fe5cb38eeb4ca

HTTP Headers

GET / HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Wed, 07 May 2025 21:56:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Wed, 07 May 2025 21:56:22 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jR3UCR3wnyWE2OifiRt0XVV8OD8FciS2TGtgp894ZfkqXbUdeYsxPNLKfcmB0GehQ7xf2NlT8WStrzepkjwN6TFdAYeLecjl%2FIGyZ8pckAYjLnyvl55GSCbCiI4uZ%2FQsECm86vPEl%2Fs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93c3f7297d3356bf-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=529&min_rtt=529&rtt_var=264&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=394&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

mobilegatepayment.com/cdn-cgi/styles/cf.errors.css

104.21.45.112

200 OK

24 kB

URL GET
mobilegatepayment.com/cdn-cgi/styles/cf.errors.css
IP
104.21.45.112:80
ASN
#13335 CLOUDFLARENET

Requested by
http://mobilegatepayment.com/

File type
ASCII text, with very long lines (24050)
Size
24 kB (24051 bytes)
Hash
5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mobilegatepayment.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 07 May 2025 21:56:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: W/"6819dca5-5df3"
Server: cloudflare
CF-RAY: 93c3f72aef2856bf-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Wed, 07 May 2025 23:56:07 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

mobilegatepayment.com/favicon.ico

104.21.45.112

403 Forbidden

4.5 kB

URL GET
mobilegatepayment.com/favicon.ico
IP
104.21.45.112:80
ASN
#13335 CLOUDFLARENET

Requested by
http://mobilegatepayment.com/

File type
HTML document, ASCII text, with very long lines (394)
Size
4.5 kB (4523 bytes)
Hash
177bf36cb428a2b85152ef0870d0800a
7fd4baaf49510387db59a45904fbde41e95bbc77
d97b696e9d7903cc3b6950007e6556532ee5b8d72fa6cd76a622c9f9f19868c1

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mobilegatepayment.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Wed, 07 May 2025 21:56:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Wed, 07 May 2025 21:56:22 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OD1Vk9s9aTVhcrre8KEmeM4bNapVki%2Bvw5YK7RfEBUzpqBI8xkxXeaoBlTARPsCeoYnoIFKe8mOaaAKzz6Y%2FDVvHKVlktnqSrvgH7U2Fkcyy9cjdrnO5pEUaM0%2B161IhbuUp4AM%2Fzkw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93c3f72b5fbb56bf-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=533&min_rtt=434&rtt_var=119&sent=9&recv=10&lost=0&retrans=0&sent_bytes=7667&recv_bytes=1114&delivery_rate=7541666&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

mobilegatepayment.com/cdn-cgi/images/cf-no-screenshot-error.png

172.67.213.145

200 OK

3.2 kB

URL GET
mobilegatepayment.com/cdn-cgi/images/cf-no-screenshot-error.png
IP
172.67.213.145:80
ASN
#13335 CLOUDFLARENET

Requested by
http://mobilegatepayment.com/

File type
PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Size
3.2 kB (3213 bytes)
Hash
0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mobilegatepayment.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 07 May 2025 21:56:07 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: "6819dca5-c8d"
Server: cloudflare
CF-RAY: 93c3f72b8d1e5684-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Wed, 07 May 2025 23:56:07 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

mobilegatepayment.com/cdn-cgi/images/browser-bar.png?1376755637

104.21.45.112

200 OK

715 B

URL GET
mobilegatepayment.com/cdn-cgi/images/browser-bar.png?1376755637
IP
104.21.45.112:80
ASN
#13335 CLOUDFLARENET

Requested by
http://mobilegatepayment.com/

File type
PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Size
715 B (715 bytes)
Hash
226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mobilegatepayment.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 07 May 2025 21:56:07 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: "6819dca5-2cb"
Server: cloudflare
CF-RAY: 93c3f72b7fe956bf-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Wed, 07 May 2025 23:56:07 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

mobilegatepayment.com/

104.21.45.112

403 Forbidden

4.6 kB

URL User Request GET
mobilegatepayment.com/
IP
104.21.45.112:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectmobilegatepayment.com
Fingerprint5E:16:DF:4F:4C:67:10:7D:32:50:1B:0B:2F:03:64:62:91:D4:E8:A9
ValidityWed, 07 May 2025 08:03:42 GMT - Tue, 05 Aug 2025 09:02:27 GMT

File type
HTML document, ASCII text, with very long lines (396)
Size
4.6 kB (4555 bytes)
Hash
a09f2e858dce47cb68b2ec8ca0b56cd7
b17a53077e9dcafc27d32a47ca8b33b4a43bd244
f7f1942f249265d0c1f0e7c46e66acd0461266c43e83b8c43fd7480ecf01b780

HTTP Headers

GET / HTTP/1.1
Host: mobilegatepayment.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Wed, 07 May 2025 21:56:07 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Y0LiQi2Uiu%2F4N2ysqRiLs%2FFfBhxxRqMjHGpmLCoTPN5NdjUa1NJO3IYUGMc7FrSsUM8v%2Fx4wE%2BEQg5523FGpCOnel%2F9NxWRnU4Q9AbsZixoGwhvQwPF8pPzs0uYvLO07AcTeLdvdTZU%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 93c3f7287aaa1c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type