Report - cvv-sale.ru/login.php

Report Overview

Visited public
2025-04-25 13:25:27
Tags
URL
cvv-sale.ru/login.php
Finishing URL
cvv-sale.ru/login.php
IP / ASN
46.173.214.56
#47196 Garant-Park-Internet LLC
Title
Free CVV CC Shop online

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cvv-sale.ru	unknown	2023-10-20	2021-08-18	2023-12-16	5.5 kB	438 kB	46.173.214.56

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed
2025-04-25	medium	cvv-sale.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	cvv-sale.ru/login.php	ScriptElement	474 B	2023-03-08	2025-04-28
Pretty URL cvv-sale.ru/login.php IP 46.173.214.56 ASN #47196 Garant-Park-Internet LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44 Last Seen2025-04-28 16:42 Times Seen101 Hash 4cacfa16d4812e951748f0d94f3fcfa0 834490a2f6fa29dc1be564ed7824ced59d9b5e6b c9f88824bb5278586287b9c0c04dd67d3103c8ee3626436438c52d98728a7709 Loading...

	cvv-sale.ru/login.php	ScriptElement	2 B	2023-03-07	2025-05-10
Pretty URL cvv-sale.ru/login.php IP 46.173.214.56 ASN #47196 Garant-Park-Internet LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-10 01:17 Times Seen21739 Hash e1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070 Loading...

	cvv-sale.ru/assets/js/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL cvv-sale.ru/assets/js/jquery.min.js IP 46.173.214.56 ASN #47196 Garant-Park-Internet LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-09 09:08 Times Seen6470 Hash b61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b Loading...

	cvv-sale.ru/assets/js/simple-overlay.js	ScriptElement	14 kB	2023-03-08	2025-04-28
Pretty URL cvv-sale.ru/assets/js/simple-overlay.js IP 46.173.214.56 ASN #47196 Garant-Park-Internet LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:44 Last Seen2025-04-28 16:42 Times Seen117 Hash 8051fba790dcb6a331f16d3e47e7db67 3922a329a710fe38589a516431916e15c66a28ae 90906c5d42dc0fc75b5a5a2388d5e7001a5275e75bd9ecd4e79467c1d321cac8 Loading...

HTTP Transactions (11)

URL IP Response Size

cvv-sale.ru/assets/img/card.png

46.173.214.56

200 OK

87 kB

URL GET
cvv-sale.ru/assets/img/card.png
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
PNG image data, 771 x 495, 8-bit/color RGBA, non-interlaced
Size
87 kB (86718 bytes)
Hash
7ce93ecf6a43bc417ba8dabc33a4a38b
937ec63f3ea281fa497643b1aec385e310477014
63dde062b2a01e6f28d7a9ef125ca55d2cc0f4f3beb68587eaf922be7a02e651

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/card.png HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/assets/css/style.css
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:56 GMT
Content-Type: image/png
Content-Length: 86718
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:42 GMT
ETag: "152be-62ae50520cd4d"
Accept-Ranges: bytes

cvv-sale.ru/login.php

46.173.214.56

200 OK

2.5 kB

URL User Request GET
cvv-sale.ru/login.php
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
2.5 kB (2485 bytes)
Hash
3560c4324ddd44e570584750e7a7602b
aa0377fc8643c2c37ba42c10443b1fc8303f6ed9
886fa1af227a9cdd70a3847bffe9393da21a5a2b38597c687b9b981af92e4154

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.php HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 990
Connection: keep-alive
Set-Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/img/logo.svg

46.173.214.56

200 OK

13 kB

URL GET
cvv-sale.ru/assets/img/logo.svg
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
SVG Scalable Vector Graphics image
Size
13 kB (13085 bytes)
Hash
e431ab9e0e1fe18e4a63c5b966eb1f5c
60ba67eccb0214d4f675e4d8b82634e2b7bc4e2b
4723ed9cefc38eaa87a7cff3f15aab701835233384fd2c3f2eb9368eda45fc40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/logo.svg HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:56 GMT
Content-Type: image/svg+xml
Content-Length: 13085
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 04 Jan 2025 17:49:42 GMT
ETag: "331d-62ae50521b7ae"
Accept-Ranges: bytes

cvv-sale.ru/assets/css/style.css

46.173.214.56

200 OK

6.2 kB

URL GET
cvv-sale.ru/assets/css/style.css
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
ASCII text
Size
6.2 kB (6191 bytes)
Hash
a468cb249a854740b27f68014eac5fe9
3c0d8cdec1e21359dd4d37e6f2518902a244e39a
d88d4b47cbd6b237534151ebbf92805026199141d2b8abb50b51f40a6d18fbf7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: text/css
Content-Length: 1814
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "182f-62ae5050c89b9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/css/simple-overlay.css

46.173.214.56

200 OK

2.4 kB

URL GET
cvv-sale.ru/assets/css/simple-overlay.css
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
ASCII text
Size
2.4 kB (2352 bytes)
Hash
c1384498c6c13fd33116c8bef01a5ed9
09d662a02e5acf9ffa1d8e7028a00ebd78812172
b76bc5bcd4197b47b6478f9d6ced7a5556c2f778b574200ae0140bea39046562

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/simple-overlay.css HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: text/css
Content-Length: 780
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "930-62ae5050baef8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/js/jquery.min.js

46.173.214.56

200 OK

90 kB

URL GET
cvv-sale.ru/assets/js/jquery.min.js
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
90 kB (89478 bytes)
Hash
b61aa6e2d68d21b3546b5b418bf0e9c3
9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/jquery.min.js HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: application/javascript
Content-Length: 30916
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:43 GMT
ETag: "15d86-62ae50535dc02-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/js/simple-overlay.js

46.173.214.56

200 OK

14 kB

URL GET
cvv-sale.ru/assets/js/simple-overlay.js
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
14 kB (13993 bytes)
Hash
8051fba790dcb6a331f16d3e47e7db67
3922a329a710fe38589a516431916e15c66a28ae
90906c5d42dc0fc75b5a5a2388d5e7001a5275e75bd9ecd4e79467c1d321cac8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/simple-overlay.js HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: application/javascript
Content-Length: 3410
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:43 GMT
ETag: "36a9-62ae505379183-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/fonts/roboto-v29-latin-700.woff2

46.173.214.56

200 OK

16 kB

URL GET
cvv-sale.ru/assets/fonts/roboto-v29-latin-700.woff2
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15828, version 1.0
Size
16 kB (15828 bytes)
Hash
bf28241e67511184c14dbd0ef7d39f91
c706e0a4122ab727645b744c21667390e8898a4d
0eaeadb58e6995ba85eccb6198aaef77eeb1d4b66699e4e1f3fc10eb6adfcdb9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/roboto-v29-latin-700.woff2 HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/assets/css/bootstrap.css
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:56 GMT
Content-Length: 15828
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:41 GMT
ETag: "3dd4-62ae50518eda5"
Accept-Ranges: bytes

cvv-sale.ru/favicon.gif

46.173.214.56

200 OK

733 B

URL GET
cvv-sale.ru/favicon.gif
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
GIF image data, version 89a, 32 x 32
Size
733 B (733 bytes)
Hash
6b887cab2fcc0547d091e7970cf95933
7a6aee438f6aeb2975ee1325295ce1665314b7fd
9b559b62e77bfabc1543f707db2a5b87c0af42f379be55159f483b18ab1c49e2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.gif HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:56 GMT
Content-Type: image/gif
Content-Length: 733
Connection: keep-alive
Last-Modified: Sun, 05 Jan 2025 13:50:37 GMT
ETag: "2dd-62af5cbf367d3"
Accept-Ranges: bytes

cvv-sale.ru/assets/css/bootstrap.css

46.173.214.56

200 OK

188 kB

URL GET
cvv-sale.ru/assets/css/bootstrap.css
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
ASCII text, with CRLF line terminators
Size
188 kB (187771 bytes)
Hash
dab1dbd9b947a349c0e6f787d610b48d
bf77617beb6d0246b829fa39f5b3c46abe3aa0fb
ba97b1abe863d7bbd25158d29b7aa5940fd550c3cd996dc958ae8fa3ffb58399

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.css HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/login.php
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:55 GMT
Content-Type: text/css
Content-Length: 22976
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "2dd7b-62ae5050ae3d7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv-sale.ru/assets/fonts/roboto-v29-latin-300.woff2

46.173.214.56

200 OK

16 kB

URL GET
cvv-sale.ru/assets/fonts/roboto-v29-latin-300.woff2
IP
46.173.214.56:443
ASN
#47196 Garant-Park-Internet LLC

Requested by
https://cvv-sale.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv-sale.ru
FingerprintBF:EE:B4:81:36:8B:81:D1:93:94:E7:10:38:BB:1A:CC:DB:35:F9:19
ValidityWed, 12 Feb 2025 06:11:35 GMT - Tue, 13 May 2025 06:11:34 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15732, version 1.0
Size
16 kB (15732 bytes)
Hash
80fe119e5efa3911b9d61b265f723b3d
34f751a1b1a0c1c0b5264b99f490e689db939657
33530b007071281a97e79baab13ddf7cc4b9de942ebd3e212224857335f7cb97

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/roboto-v29-latin-300.woff2 HTTP/1.1
Host: cvv-sale.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cvv-sale.ru/assets/css/bootstrap.css
Cookie: PHPSESSID=5b6bmkpf1n2fs3edopt510iej0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Apr 2025 13:24:56 GMT
Content-Length: 15732
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:41 GMT
ETag: "3d74-62ae50514e661"
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers