Report - cvv2-dumps-cvv.ru/login.php

Report Overview

Visited public
2025-04-01 16:08:25
Tags
URL
cvv2-dumps-cvv.ru/login.php
Finishing URL
cvv2-dumps-cvv.ru/login.php
IP / ASN
193.124.118.199
#214822 Mt Finance LLC
Title
Sell CC, CVV, Dumps, PayPal, SSN, Full CC INFO, Bank Logins, Tracks, Carder Tools, CVV Shop Site, Carder Shop CVV_CVV2 Fullz - Dumps With VBV, Dumps Pin Shop, CVV Dumps Site, Selling Good Dumps 101 201,

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cvv2-dumps-cvv.ru	unknown	2025-02-27	2025-04-01	2025-04-01	5.6 kB	438 kB	193.124.118.199

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed
2025-04-01	medium	cvv2-dumps-cvv.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	cvv2-dumps-cvv.ru/login.php	ScriptElement	474 B	2023-03-08	2025-04-28
Pretty URL cvv2-dumps-cvv.ru/login.php IP 193.124.118.199 ASN #214822 Mt Finance LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44 Last Seen2025-04-28 16:42 Times Seen101 Hash 4cacfa16d4812e951748f0d94f3fcfa0 834490a2f6fa29dc1be564ed7824ced59d9b5e6b c9f88824bb5278586287b9c0c04dd67d3103c8ee3626436438c52d98728a7709 Loading...

	cvv2-dumps-cvv.ru/assets/js/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-10
Pretty URL cvv2-dumps-cvv.ru/assets/js/jquery.min.js IP 193.124.118.199 ASN #214822 Mt Finance LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-10 02:46 Times Seen6471 Hash b61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b Loading...

	cvv2-dumps-cvv.ru/assets/js/simple-overlay.js	ScriptElement	14 kB	2023-03-08	2025-04-28
Pretty URL cvv2-dumps-cvv.ru/assets/js/simple-overlay.js IP 193.124.118.199 ASN #214822 Mt Finance LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:44 Last Seen2025-04-28 16:42 Times Seen117 Hash 8051fba790dcb6a331f16d3e47e7db67 3922a329a710fe38589a516431916e15c66a28ae 90906c5d42dc0fc75b5a5a2388d5e7001a5275e75bd9ecd4e79467c1d321cac8 Loading...

	cvv2-dumps-cvv.ru/login.php	ScriptElement	2 B	2023-03-07	2025-05-10
Pretty URL cvv2-dumps-cvv.ru/login.php IP 193.124.118.199 ASN #214822 Mt Finance LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-10 01:17 Times Seen21739 Hash e1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070 Loading...

HTTP Transactions (11)

URL IP Response Size

cvv2-dumps-cvv.ru/favicon.gif

193.124.118.199

200 OK

733 B

URL GET
cvv2-dumps-cvv.ru/favicon.gif
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
GIF image data, version 89a, 32 x 32
Size
733 B (733 bytes)
Hash
6b887cab2fcc0547d091e7970cf95933
7a6aee438f6aeb2975ee1325295ce1665314b7fd
9b559b62e77bfabc1543f707db2a5b87c0af42f379be55159f483b18ab1c49e2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.gif HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:06 GMT
Content-Type: image/gif
Content-Length: 733
Connection: keep-alive
Last-Modified: Sun, 05 Jan 2025 13:50:37 GMT
ETag: "2dd-62af5cbf367d3"
Accept-Ranges: bytes

cvv2-dumps-cvv.ru/assets/img/logo.svg

193.124.118.199

200 OK

13 kB

URL GET
cvv2-dumps-cvv.ru/assets/img/logo.svg
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
SVG Scalable Vector Graphics image
Size
13 kB (13085 bytes)
Hash
e431ab9e0e1fe18e4a63c5b966eb1f5c
60ba67eccb0214d4f675e4d8b82634e2b7bc4e2b
4723ed9cefc38eaa87a7cff3f15aab701835233384fd2c3f2eb9368eda45fc40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/logo.svg HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: image/svg+xml
Content-Length: 13085
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 04 Jan 2025 17:49:42 GMT
ETag: "331d-62ae50521b7ae"
Accept-Ranges: bytes

cvv2-dumps-cvv.ru/assets/img/card.png

193.124.118.199

200 OK

87 kB

URL GET
cvv2-dumps-cvv.ru/assets/img/card.png
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
PNG image data, 771 x 495, 8-bit/color RGBA, non-interlaced
Size
87 kB (86718 bytes)
Hash
7ce93ecf6a43bc417ba8dabc33a4a38b
937ec63f3ea281fa497643b1aec385e310477014
63dde062b2a01e6f28d7a9ef125ca55d2cc0f4f3beb68587eaf922be7a02e651

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/card.png HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/assets/css/style.css
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:06 GMT
Content-Type: image/png
Content-Length: 86718
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:42 GMT
ETag: "152be-62ae50520cd4d"
Accept-Ranges: bytes

cvv2-dumps-cvv.ru/assets/fonts/roboto-v29-latin-300.woff2

193.124.118.199

200 OK

16 kB

URL GET
cvv2-dumps-cvv.ru/assets/fonts/roboto-v29-latin-300.woff2
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15732, version 1.0
Size
16 kB (15732 bytes)
Hash
80fe119e5efa3911b9d61b265f723b3d
34f751a1b1a0c1c0b5264b99f490e689db939657
33530b007071281a97e79baab13ddf7cc4b9de942ebd3e212224857335f7cb97

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/roboto-v29-latin-300.woff2 HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/assets/css/bootstrap.css
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:06 GMT
Content-Length: 15732
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:41 GMT
ETag: "3d74-62ae50514e661"
Accept-Ranges: bytes

cvv2-dumps-cvv.ru/assets/fonts/roboto-v29-latin-700.woff2

193.124.118.199

200 OK

16 kB

URL GET
cvv2-dumps-cvv.ru/assets/fonts/roboto-v29-latin-700.woff2
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15828, version 1.0
Size
16 kB (15828 bytes)
Hash
bf28241e67511184c14dbd0ef7d39f91
c706e0a4122ab727645b744c21667390e8898a4d
0eaeadb58e6995ba85eccb6198aaef77eeb1d4b66699e4e1f3fc10eb6adfcdb9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/roboto-v29-latin-700.woff2 HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/assets/css/bootstrap.css
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:06 GMT
Content-Length: 15828
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:41 GMT
ETag: "3dd4-62ae50518eda5"
Accept-Ranges: bytes

cvv2-dumps-cvv.ru/assets/js/jquery.min.js

193.124.118.199

200 OK

90 kB

URL GET
cvv2-dumps-cvv.ru/assets/js/jquery.min.js
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
90 kB (89478 bytes)
Hash
b61aa6e2d68d21b3546b5b418bf0e9c3
9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/jquery.min.js HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: application/javascript
Content-Length: 30916
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:43 GMT
ETag: "15d86-62ae50535dc02-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv2-dumps-cvv.ru/assets/js/simple-overlay.js

193.124.118.199

200 OK

14 kB

URL GET
cvv2-dumps-cvv.ru/assets/js/simple-overlay.js
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type

Size
14 kB (13993 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/simple-overlay.js HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: application/javascript
Content-Length: 3410
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:43 GMT
ETag: "36a9-62ae505379183-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv2-dumps-cvv.ru/login.php

193.124.118.199

200 OK

2.7 kB

URL User Request GET
cvv2-dumps-cvv.ru/login.php
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
HTML document, ASCII text, with very long lines (3121), with no line terminators
Size
2.7 kB (2669 bytes)
Hash
733d2fd1a57d3213a9e2daae5050341b
14ea6bdb4c835bf81436336afa74a3e3ddebc0a6
46f808fc302da4ff2355417b8263b42b40f2f607799e433d3adcbac8308d7df0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.php HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:04 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1093
Connection: keep-alive
Set-Cookie: PHPSESSID=icoaolplessl84648tf3tdact6; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip

cvv2-dumps-cvv.ru/assets/css/style.css

193.124.118.199

200 OK

6.2 kB

URL GET
cvv2-dumps-cvv.ru/assets/css/style.css
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
ASCII text, with very long lines (6562), with no line terminators
Size
6.2 kB (6191 bytes)
Hash
0434c2c403143795befc94886a655d9f
ed02e2c49a678efa8f4c56e690a1f2922ed07dd1
c3b1d413b978d17180ec677cf8c40d5d6d1a69f228c4f5a73c69c05b7fa56a98

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: text/css
Content-Length: 1814
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "182f-62ae5050c89b9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv2-dumps-cvv.ru/assets/css/bootstrap.css

193.124.118.199

200 OK

188 kB

URL GET
cvv2-dumps-cvv.ru/assets/css/bootstrap.css
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
ASCII text, with CRLF line terminators
Size
188 kB (187771 bytes)
Hash
dab1dbd9b947a349c0e6f787d610b48d
bf77617beb6d0246b829fa39f5b3c46abe3aa0fb
ba97b1abe863d7bbd25158d29b7aa5940fd550c3cd996dc958ae8fa3ffb58399

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.css HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: text/css
Content-Length: 22976
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "2dd7b-62ae5050ae3d7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

cvv2-dumps-cvv.ru/assets/css/simple-overlay.css

193.124.118.199

200 OK

2.4 kB

URL GET
cvv2-dumps-cvv.ru/assets/css/simple-overlay.css
IP
193.124.118.199:443
ASN
#214822 Mt Finance LLC

Requested by
https://cvv2-dumps-cvv.ru/login.php
Certificate
IssuerLet's Encrypt
Subjectcvv2-dumps-cvv.ru
Fingerprint5E:23:8C:4E:1F:4A:77:8F:B2:04:A7:0E:A5:B4:56:A1:F1:B3:9A:A2
ValidityWed, 05 Mar 2025 05:55:41 GMT - Tue, 03 Jun 2025 05:55:40 GMT

File type
ASCII text, with very long lines (2437), with no line terminators
Size
2.4 kB (2352 bytes)
Hash
f4cd37725250f925e189c1fda4eef2fd
6db961524bd3f8da99b43c09818991d2dd933a10
f48ab2e30af1d8f558773d97dafb1f9404ff00a306421a065a0d62b3c5d82640

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/simple-overlay.css HTTP/1.1
Host: cvv2-dumps-cvv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cvv2-dumps-cvv.ru/login.php
Cookie: PHPSESSID=icoaolplessl84648tf3tdact6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Apr 2025 16:08:05 GMT
Content-Type: text/css
Content-Length: 780
Connection: keep-alive
Last-Modified: Sat, 04 Jan 2025 17:49:40 GMT
ETag: "930-62ae5050baef8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections