wotsrepleys.ru/
31.31.198.106302 Found 207 B IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1a38533b9b4940d043bd02a43bfa8c8f
16976f52633d52f890e3b04cf0b14c1befbe05bd
3a8ec2f4014bd3c98e9610035e6c928c16e8aa0e5de16cf3c293591658190030
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Dec 2022 10:48:24 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://wotsrepleys.ru/
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4589
Cache-Control: max-age=89957
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 10:48:24 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:47:41 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 10:18:11 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1813
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3405
Expires: Fri, 02 Dec 2022 11:45:09 GMT
Date: Fri, 02 Dec 2022 10:48:24 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8482
Expires: Fri, 02 Dec 2022 13:09:46 GMT
Date: Fri, 02 Dec 2022 10:48:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xkpOeGZ2E4SHbExCQ5f6C59iSkc4qOzaCSTpvm/9/ho/Jl0dwpyDeG+AvCCHx7zHfDB4Eb45iVU=
x-amz-request-id: 633JGMGSB3V7DZ1S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 10:46:05 GMT
age: 139
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 10:08:57 GMT
cache-control: public,max-age=3600
age: 2367
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.21.226:0
Hash 0e7fd4dcab9bf3e21015057e0fd79f5c
b438e3b199acbc89d5972f46d701baabdd20dce7
965e8413ec2f795c0644c9225b303836a5d613335ca2eb5bc3d258f49451f92a
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 10:48:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 06 Dec 2022 10:48:23 GMT
ETag: "b438e3b199acbc89d5972f46d701baabdd20dce7"
Last-Modified: Fri, 02 Dec 2022 10:48:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77337d722bcab529-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4582
Cache-Control: max-age=171291
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 10:48:25 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:23:16 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.43.58.150101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.58.150:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5MpCq/yKGw5lqGdbcMmRQQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: c9MBHKTt76ioLkBVzPp3CVVF76Q=
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash acf419fec7b25972ff40d5966270a8c9
1f5c04d738e00a701621dfcfde07317ea9b635bb
2203823f90d881470848f23e61e91f8c4923dd04fc4d92269eb9c17995363438
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 125
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 10:48:25 GMT
Last-Modified: Fri, 02 Dec 2022 10:46:20 GMT
Server: ECS (amb/6BA9)
X-Cache: HIT
Content-Length: 471
wotsrepleys.ru/index_files/location
31.31.198.106200 OK 192 B URL HTTP/2 wotsrepleys.ru/index_files/location
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type ASCII text, with no line terminators
Hash 4eb45440a1951f6cd3a96ddcc2ba143f
8cc05c57d54202f095512b4c0df6bd651d19c0e9
0e57ce0992920bab659401230f3dfe3521635a222bee07e2c0046a7660efc5ab
Analyzer Verdict Alert fortinet Phishing
GET /index_files/location HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-length: 192
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
etag: "c0-5d6f82e9fa080"
accept-ranges: bytes
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/4Fy2RVj9RmCO2LlF6KIbEw.svg
31.31.198.106200 OK 996 B URL HTTP/2 wotsrepleys.ru/index_files/4Fy2RVj9RmCO2LlF6KIbEw.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 85996d4edbb6bd60ea611cf7b813916c
316571d41a2ea05d4f444836f46c061db2dea932
1e0d0d30f8b31bbff6eb5db31274e6edb52e4bdd5dee1767921dcbe0777ec497
Analyzer Verdict Alert fortinet Phishing
GET /index_files/4Fy2RVj9RmCO2LlF6KIbEw.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
content-length: 996
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
etag: "61f96cf2-3e4"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9866
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 10:48:26 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9866
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 10:48:26 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9866
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 10:48:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cgj3fw3lpngosMNOK7cZUZO94T__4RTy_p7wa6rI62OOvhI5E9wMSw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:30:28 GMT
age: 76678
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 00:54:54 GMT
age: 35612
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 72 kB URL HTTP/2 wotsrepleys.ru/index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash f7f1389f57bb82af2633a6076eef6ea0
d9b5b97cda1b22ec79ac0ef5aa06f61bf5f0434f
ae476c51be7ceb25c476c53fa5c19f77dd6f44b1b72489b80d3b92bebb07c89c
Analyzer Verdict Alert fortinet Phishing
GET /index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jM-fTqLsmU3c_gc9Wle-lvCwXelA9Sid9axtzJQDsfOHv23yUbKsBw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 23:43:28 GMT
age: 39898
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16a112f00456d38c4c9e051ccf40e105
8fe32fffe672f0e91ce773af0e4be960f55bad08
43517bbcd17ec6d05d09a4c0d183610acdc7e2fa4767cb786cb8b936d5f44402
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13461
x-amzn-requestid: 8c0121a6-cf29-4cd0-bd42-d9f67af62b84
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsyGhGoAMF1-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7eb-593f28367320530e2dcafbfb;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fY7pkaeRu9vdWa68sWrtGxp2BkC9lZhbJ1cgGWap2H8y1zXUxKT6zA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:08:22 GMT
age: 20404
etag: "8fe32fffe672f0e91ce773af0e4be960f55bad08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c7113338bc3310b13d23ca415c177e2
2cb4edc6b161c6d2d5b47aa498ae54e677966466
3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NQ21d2_5JO2Ym-LEnDecub9bK6wUyvM2zUf_XpfMGag83fVWlMjT8w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:09 GMT
age: 46697
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/wg_logo_airy.png
185.12.240.13200 OK 9.7 kB URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/wg_logo_airy.png
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 178 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash cb3f418766e594969e804da80824be59
13be991089bda92eab9075fcfc0aa1d5a5c805d6
0ef1aba3afef34b51cfcd2a73bd76f285775d47f1537f82d75e377329abe8b7b
GET /id/static/2021.8.2/wgnet/img/wg_logo_airy.png HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/png
content-length: 9677
last-modified: Thu, 03 Nov 2022 11:02:44 GMT
etag: "63639fd4-25cd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_facebook-c.svg
185.12.240.13200 OK 1.0 kB URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_facebook-c.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (638)
Hash ab1cf0c9a3fffd98f1da8e1f4c034695
3a9820bcc25c92a242694dff52c6cc3ceef26042
d9f4f218a9e32300f400c7e49a286d3c163ac869b7d5028625b03e9082af7a1b
GET /id/static/2021.8.2/wgnet/img/sc/icon_facebook-c.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
content-length: 1029
last-modified: Thu, 03 Nov 2022 10:17:38 GMT
etag: "63639542-405"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_live-d.svg
185.12.240.13200 OK 845 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_live-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f4649fad873fb834398a7209394201dc
3ce84ceb71a7ed7b76a3a6341b0c9565ff78106c
c2a310d73121ca0c401b97bb0264eb8926ada06219875e355abcf455e7dda61f
GET /id/static/2021.8.2/wgnet/img/sc/icon_live-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
content-length: 845
last-modified: Thu, 03 Nov 2022 11:02:45 GMT
etag: "63639fd5-34d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_steam-d.svg
185.12.240.13200 OK 791 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_steam-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (581)
Hash a45fd15615c012d0a9f27f1c26f9d97d
08eb56fa145bfbe78c8141614d604023ffe41df2
1109e514b942517f02020623623bf3f05947fd0a911c64b4a10136f83910b578
GET /id/static/2021.8.2/wgnet/img/sc/icon_steam-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
content-length: 791
last-modified: Thu, 03 Nov 2022 11:02:47 GMT
etag: "63639fd7-317"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_twitch-d.svg
185.12.240.13200 OK 448 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_twitch-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 87f3de47fb31fa11bf875e8cbaf3187a
bf8fbb237c8df20e8231b5751ef55fdd67e2c963
5a28c54444d401d58202f44a7c6f4a945656a06244a4508b83c57719200f6376
GET /id/static/2021.8.2/wgnet/img/sc/icon_twitch-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
content-length: 448
last-modified: Thu, 03 Nov 2022 10:17:38 GMT
etag: "63639542-1c0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
wotsrepleys.ru/fonts/robotocondensed-bold/robotocondensed-bold.woff
31.31.198.106404 Not Found 312 kB URL HTTP/2 wotsrepleys.ru/fonts/robotocondensed-bold/robotocondensed-bold.woff
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators
Size 312 kB (312239 bytes)
Hash 819f473a19605a5b9e4822798b15e080
ac9b6cf78a8d6e7616a9f7f8c1e74a2ddd52593a
09e2c6e287b2a2e4df49462e12042bc728bf2bc99c7bf43b9d601874e90e97c9
Analyzer Verdict Alert fortinet Phishing
GET /fonts/robotocondensed-bold/robotocondensed-bold.woff HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
X-Firefox-Spdy: h2
wotsrepleys.ru/favicon.png
31.31.198.106200 OK 4.1 kB URL HTTP/2 wotsrepleys.ru/favicon.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d85568193915771c463bec448b0d4e6
f421aed5ca319cc44539bac3e85a104b813b9465
4b715dcbcc237b14be5582e94759107d886259cca5cbc7e7c536f0333e41863b
GET /favicon.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/png
content-length: 4089
last-modified: Tue, 01 Feb 2022 17:31:38 GMT
etag: "61f96e7a-ff9"
expires: Mon, 16 Jan 2023 10:48:27 GMT
cache-control: max-age=3888000
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ArJSu5jI0RrZj3QtJp6oI6Yvf9LCWrYqU0HRIl8U8xJjdeOaJEe2yg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:20:07 GMT
age: 44906
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/qSe-O_HzRhO8iL4b4l6oog.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/qSe-O_HzRhO8iL4b4l6oog.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/qSe-O_HzRhO8iL4b4l6oog.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-fb2"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/EIp2bvzxTv6bio2qHUCPRg.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/EIp2bvzxTv6bio2qHUCPRg.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/EIp2bvzxTv6bio2qHUCPRg.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-111c"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/signin-page_devider.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/signin-page_devider.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/signin-page_devider.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/sc/icon_amazon-d.svg
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/sc/icon_amazon-d.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /img/sc/icon_amazon-d.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/
31.31.198.106200 OK 0 B IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/plph6FkfQMOT7H0yDTmejQ.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/plph6FkfQMOT7H0yDTmejQ.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/plph6FkfQMOT7H0yDTmejQ.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-19c1"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/tracker-config.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/tracker-config.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/tracker-config.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/region-select-separator.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/region-select-separator.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/region-select-separator.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/moment.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/ru.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/ru.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/ru.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/Wc9we6f7SWeZPExOChwGRA.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/Wc9we6f7SWeZPExOChwGRA.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/Wc9we6f7SWeZPExOChwGRA.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-1301"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/gtm.js(1).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/gtm.js(2).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/gtm.js(2).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/gtm.js(2).%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/vendors_app.807e671bc0f9e4de3190.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/ru.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/ru.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/ru.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/ajCX6d89TnSui2OA3TeFEQ.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/ajCX6d89TnSui2OA3TeFEQ.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/ajCX6d89TnSui2OA3TeFEQ.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-190f"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/FTVUgYTtSDKax6W2wTcuGQ.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/FTVUgYTtSDKax6W2wTcuGQ.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/FTVUgYTtSDKax6W2wTcuGQ.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:08 GMT
vary: Accept-Encoding
etag: W/"61f96cf4-1317"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/A1Q4i6a4SQS9jqEDiEekYw.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/A1Q4i6a4SQS9jqEDiEekYw.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/A1Q4i6a4SQS9jqEDiEekYw.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-1365"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/events.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/events.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/events.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/hYBNtedAQzORcbkDJ1STog.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/hYBNtedAQzORcbkDJ1STog.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/hYBNtedAQzORcbkDJ1STog.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-12ef2"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/JS3E13c-RB-uDwL9l38EKg.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/JS3E13c-RB-uDwL9l38EKg.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/JS3E13c-RB-uDwL9l38EKg.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-1ac2"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/3AJ0vRF1QdSXp34l3gfEHw.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/3AJ0vRF1QdSXp34l3gfEHw.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/3AJ0vRF1QdSXp34l3gfEHw.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-eb7"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/region-bg/region-bg_ru.svg
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/region-bg/region-bg_ru.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /img/region-bg/region-bg_ru.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/style.css
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/style.css
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /index_files/style.css HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 17:34:54 GMT
vary: Accept-Encoding
etag: W/"61f96f3e-1e1ed"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/NPyJJntPSZq9d4-QQ-gq_g.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/NPyJJntPSZq9d4-QQ-gq_g.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/NPyJJntPSZq9d4-QQ-gq_g.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-dfa"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/otBannerSdk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/otBannerSdk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/otBannerSdk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_vkontakte-d.svg
185.12.240.13200 OK 0 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_vkontakte-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
GET /id/static/2021.8.2/wgnet/img/sc/icon_vkontakte-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 03 Nov 2022 10:17:38 GMT
etag: W/"63639542-71c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_amazon-d.svg
185.12.240.13200 OK 0 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_amazon-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
GET /id/static/2021.8.2/wgnet/img/sc/icon_amazon-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 03 Nov 2022 10:17:38 GMT
etag: W/"63639542-1756"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/LwvK5CHLTBmrJ1-1J7B4zA.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/LwvK5CHLTBmrJ1-1J7B4zA.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/LwvK5CHLTBmrJ1-1J7B4zA.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-9e6"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/loginview.1e2f9f4ac5226384fd84.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/loginview.1e2f9f4ac5226384fd84.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/loginview.1e2f9f4ac5226384fd84.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/tracker.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/tracker.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/tracker.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/OtAutoBlock.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/OtAutoBlock.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/OtAutoBlock.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/yv3mgkbvSU2cyr-hoYm-RA.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/yv3mgkbvSU2cyr-hoYm-RA.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/yv3mgkbvSU2cyr-hoYm-RA.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-173f"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/0pt3xFYfTzihXFIe6A32Eg.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/0pt3xFYfTzihXFIe6A32Eg.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/0pt3xFYfTzihXFIe6A32Eg.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-8b7"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/E6pJIEVVTRi2RnDVt-2u6A.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/E6pJIEVVTRi2RnDVt-2u6A.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/E6pJIEVVTRi2RnDVt-2u6A.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-e20"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/loginview_single_external_unbound.3986fe0231da9a68c628.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/loginview_single_external_unbound.3986fe0231da9a68c628.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/loginview_single_external_unbound.3986fe0231da9a68c628.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/checkbox-airy.jpg
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/checkbox-airy.jpg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/checkbox-airy.jpg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/hzQaobCtRp2gz1hF-ubfNw.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/hzQaobCtRp2gz1hF-ubfNw.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/hzQaobCtRp2gz1hF-ubfNw.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-a99"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/runtime_app.6beff197ce05b5666368.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/signin-page_shadow.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/signin-page_shadow.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/signin-page_shadow.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/app.6db8bb6b2fb9dc1c3bc0.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/app.6db8bb6b2fb9dc1c3bc0.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/app.6db8bb6b2fb9dc1c3bc0.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/loginview_single_external.247ec32be393eb9a9d34.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/loginview_single_external.247ec32be393eb9a9d34.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/loginview_single_external.247ec32be393eb9a9d34.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/riddler.05c5387dd1064d0ae3c9.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/riddler.05c5387dd1064d0ae3c9.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/riddler.05c5387dd1064d0ae3c9.chunk.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/main_sprite_1.1.23.svg
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/main_sprite_1.1.23.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /img/main_sprite_1.1.23.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/wgni.css
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/wgni.css
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /index_files/wgni.css HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-18170"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/loader.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/loader.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/loader.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_google-d.svg
185.12.240.13200 OK 0 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_google-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
GET /id/static/2021.8.2/wgnet/img/sc/icon_google-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 03 Nov 2022 11:02:47 GMT
etag: W/"63639fd7-c8f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_egs-d.svg
185.12.240.13200 OK 0 B URL HTTP/2 ru.wargaming.net/id/static/2021.8.2/wgnet/img/sc/icon_egs-d.svg
IP 185.12.240.13:0
ASN #199524 G-Core Labs S.A.
GET /id/static/2021.8.2/wgnet/img/sc/icon_egs-d.svg HTTP/1.1
Host: ru.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 03 Nov 2022 10:17:38 GMT
etag: W/"63639542-e9b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/region-select-arrow.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/region-select-arrow.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/region-select-arrow.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/o-9ummn6RQes4jFBr1xWvg.svg
31.31.198.106200 OK 0 B URL HTTP/2 wotsrepleys.ru/index_files/o-9ummn6RQes4jFBr1xWvg.svg
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/o-9ummn6RQes4jFBr1xWvg.svg HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Feb 2022 17:25:06 GMT
vary: Accept-Encoding
etag: W/"61f96cf2-15ff"
expires: Mon, 16 Jan 2023 10:48:25 GMT
cache-control: max-age=3888000
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/index_files/otSDKStub.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/index_files/otSDKStub.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /index_files/otSDKStub.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/checkbox-airy.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/checkbox-airy.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/checkbox-airy.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/img/language-select-arrow.png
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/img/language-select-arrow.png
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
GET /img/language-select-arrow.png HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
wotsrepleys.ru/fonts/roboto-bold/roboto-bold.woff
31.31.198.106404 Not Found 0 B URL HTTP/2 wotsrepleys.ru/fonts/roboto-bold/roboto-bold.woff
IP 31.31.198.106:0
ASN #197695 Domain names registrar REG.RU, Ltd
Analyzer Verdict Alert fortinet Phishing
GET /fonts/roboto-bold/roboto-bold.woff HTTP/1.1
Host: wotsrepleys.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://wotsrepleys.ru/index_files/wgni.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 02 Dec 2022 10:48:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
X-Firefox-Spdy: h2