Report - leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113

Report Overview

Visited public
2025-06-08 18:06:18
Tags
suspicious
URL
leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_
Finishing URL
betspintrack.com/fadb2b3268bc2601/
IP / ASN
159.89.47.245
#14061 DIGITALOCEAN-ASN
Title
Secure File Download
Suspicious - Anti-debugging code

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
leadgainz.com	unknown	2022-11-25	2023-07-09	2025-06-08	2.3 kB	105 kB	159.89.47.245
betspintrack.com	unknown	2024-09-03	2025-05-30	2025-06-07	991 B	18 kB	188.166.82.118

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_	ScriptElement	87 kB	2025-06-08	2025-06-08
Pretty URL leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_ IP 159.89.47.245 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-08 18:06 Last Seen2025-06-08 18:06 Times Seen1 Hash 6ac9305b061f2bc4e1b92a535b139174 2efef335be9f0079b1592c275a2470aa793eba3a 3879fcd174533e6518491b6bd1e1476f7de4f8b94d7aebd3b1d276dbcf87a5c0 Loading...

	betspintrack.com/fadb2b3268bc2601/	ScriptElement	3.7 kB	2025-06-03	2025-06-08
Pretty URL betspintrack.com/fadb2b3268bc2601/ IP 188.166.82.118 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-03 13:41 Last Seen2025-06-08 18:06 Times Seen3 Hash a9c246b4971b756e5a43c5796746a10a 429fb413be5f4bfc0f102f40ff368870e508b31e 4c943a5d832a7cf134f95312489ff2cae36a5199affc4b663c8716e9fdeffb97 Loading...

	betspintrack.com/fadb2b3268bc2601/	ScriptElement	1.9 kB	2025-05-30	2025-06-12
Pretty URL betspintrack.com/fadb2b3268bc2601/ IP 188.166.82.118 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-30 09:32 Last Seen2025-06-12 08:43 Times Seen19 Hash 5f4523c5a589c598f480bd91c8f5f964 80ad77bdc50459bd8b97efda887999458f0c9a71 1826559907b2dd0ab7f3671d3ab009bf272f5a0db2e6bd8feaf457cb6cedba2d Loading...

HTTP Transactions (5)

URL IP Response Size

leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_

159.89.47.245

200 OK

87 kB

URL User Request GET
leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_
IP
159.89.47.245:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectleadgainz.com
Fingerprint2A:C1:8F:E4:23:4F:B0:B3:AF:5D:84:D7:29:B9:24:8D:76:D5:84:6D
ValiditySun, 25 May 2025 11:56:23 GMT - Sat, 23 Aug 2025 11:56:22 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (65232)
Size
87 kB (87292 bytes)
Hash
eeec64d1e7c98f3cb42ca5167ae895ce
41c5fd41ef67cad01dada05702f96c1fc3ef047a
ada2fbfab775734741252042cfadb63a913e79d097745e4b23cd7b7c42259dab

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Anti-debugging code

HTTP Headers

GET /click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_ HTTP/1.1
Host: leadgainz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 08 Jun 2025 18:05:56 GMT
server: Caddy
x-request-id: 21379427-b34f-4515-bd81-966ed68c58c9
X-Firefox-Spdy: h2

leadgainz.com/favicon.ico

159.89.47.245

404 Not Found

153 B

URL GET
leadgainz.com/favicon.ico
IP
159.89.47.245:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_
Certificate
IssuerLet's Encrypt
Subjectleadgainz.com
Fingerprint2A:C1:8F:E4:23:4F:B0:B3:AF:5D:84:D7:29:B9:24:8D:76:D5:84:6D
ValiditySun, 25 May 2025 11:56:23 GMT - Sat, 23 Aug 2025 11:56:22 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
153 B (153 bytes)
Hash
841102042dfedb8a9dcc0e6a9966307f
313ea8da3498deebf7f443093638df7501ce60c6
6ad407809dc8e6d079dfbd21823508dffb897b97a27eb8ae43acbea1b7c8df0d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: leadgainz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
date: Sun, 08 Jun 2025 18:05:56 GMT
server: Caddy, nginx/1.21.6
content-length: 153
X-Firefox-Spdy: h2

leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_&__bjs=eyJiIjp7ImpzIjoxLCJjIjoxLCJtIjowLCJtY2YiOjAsImJhIjoxLCJtcDQiOjEsIm10IjowLCJ0eiI6MCwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInAiOiJMaW51eCJ9LCJhIjp7ImMxIjowLCJ3IjowLCJjdyI6MCwiYWUiOjAsInRzIjowfSwid2ciOnsiciI6Imxsdm1waXBlIiwiZSI6ZmFsc2V9LCJzIjp7InNyIjoiMTI4MHgxMDI0IiwiYXMiOiIxMjgweDEwMjQiLCJpdyI6IjEyODB4MTAyNCIsIm93IjoiMTI4MHgxMDI0In0sIm4iOnsiZSI6MX0sImgiOnsiaGMiOjQ4LCJrbCI6IjAifSwiZiI6MH0=

159.89.47.245

307 Temporary Redirect

17 kB

URL User Request GET
leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_&__bjs=eyJiIjp7ImpzIjoxLCJjIjoxLCJtIjowLCJtY2YiOjAsImJhIjoxLCJtcDQiOjEsIm10IjowLCJ0eiI6MCwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInAiOiJMaW51eCJ9LCJhIjp7ImMxIjowLCJ3IjowLCJjdyI6MCwiYWUiOjAsInRzIjowfSwid2ciOnsiciI6Imxsdm1waXBlIiwiZSI6ZmFsc2V9LCJzIjp7InNyIjoiMTI4MHgxMDI0IiwiYXMiOiIxMjgweDEwMjQiLCJpdyI6IjEyODB4MTAyNCIsIm93IjoiMTI4MHgxMDI0In0sIm4iOnsiZSI6MX0sImgiOnsiaGMiOjQ4LCJrbCI6IjAifSwiZiI6MH0=
IP
159.89.47.245:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectleadgainz.com
Fingerprint2A:C1:8F:E4:23:4F:B0:B3:AF:5D:84:D7:29:B9:24:8D:76:D5:84:6D
ValiditySun, 25 May 2025 11:56:23 GMT - Sat, 23 Aug 2025 11:56:22 GMT

File type

Size
17 kB (17230 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_&__bjs=eyJiIjp7ImpzIjoxLCJjIjoxLCJtIjowLCJtY2YiOjAsImJhIjoxLCJtcDQiOjEsIm10IjowLCJ0eiI6MCwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInAiOiJMaW51eCJ9LCJhIjp7ImMxIjowLCJ3IjowLCJjdyI6MCwiYWUiOjAsInRzIjowfSwid2ciOnsiciI6Imxsdm1waXBlIiwiZSI6ZmFsc2V9LCJzIjp7InNyIjoiMTI4MHgxMDI0IiwiYXMiOiIxMjgweDEwMjQiLCJpdyI6IjEyODB4MTAyNCIsIm93IjoiMTI4MHgxMDI0In0sIm4iOnsiZSI6MX0sImgiOnsiaGMiOjQ4LCJrbCI6IjAifSwiZiI6MH0= HTTP/1.1
Host: leadgainz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://leadgainz.com/click?key=fca8c7121ce068ca76bd&pub_click_id=BniO_jQAAAGXULgGfQAABo4AAABxAAAAAAAAAABqAAAAFfw&pub_sub_id=113_
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
date: Sun, 08 Jun 2025 18:05:56 GMT
location: https://betspintrack.com/fadb2b3268bc2601/
server: Caddy
set-cookie: uclick=nriIkwtYMd8117HyPWCYvwKBsQ+cZclB3zUpVTeaA57NEYKQ214uVc8Stc3CmrMvd4JXEofz; Max-Age=31536000; SameSite=Lax
bcid=d12t2153c3kc73fcfpmg; Max-Age=31536000; SameSite=Lax
x-request-id: 8d6e1b67-b3be-41ba-9881-4a1a75c67991
content-length: 0
X-Firefox-Spdy: h2

betspintrack.com/fadb2b3268bc2601/

188.166.82.118

200 OK

17 kB

URL User Request GET
betspintrack.com/fadb2b3268bc2601/
IP
188.166.82.118:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectbetspintrack.com
FingerprintAD:B2:54:6C:8B:B3:00:1C:CF:45:F3:C1:FC:72:D2:6E:B2:D1:42:5E
ValidityTue, 20 May 2025 14:21:33 GMT - Mon, 18 Aug 2025 14:21:32 GMT

File type
HTML document, ASCII text
Size
17 kB (17230 bytes)
Hash
b0d5fe7b907ddcb1993023561819822b
1c0cf2e266981d1a2bf3318664fd6e0f8691e799
d33fdeaff769613efeebc7186cb92d57e3b1c52dd5a6e2f81b137fbaf49655fa

HTTP Headers

GET /fadb2b3268bc2601/ HTTP/1.1
Host: betspintrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://leadgainz.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 08 Jun 2025 18:05:57 GMT
content-type: text/html
last-modified: Fri, 23 May 2025 10:24:36 GMT
vary: Accept-Encoding
etag: W/"68304ce4-434e"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
referrer-policy: same-origin
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2

betspintrack.com/favicon.ico

188.166.82.118

404 Not Found

146 B

URL GET
betspintrack.com/favicon.ico
IP
188.166.82.118:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://betspintrack.com/fadb2b3268bc2601/
Certificate
IssuerLet's Encrypt
Subjectbetspintrack.com
FingerprintAD:B2:54:6C:8B:B3:00:1C:CF:45:F3:C1:FC:72:D2:6E:B2:D1:42:5E
ValidityTue, 20 May 2025 14:21:33 GMT - Mon, 18 Aug 2025 14:21:32 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: betspintrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betspintrack.com/fadb2b3268bc2601/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Sun, 08 Jun 2025 18:05:57 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers