Report - rmc.dax.ru/

Report Overview

Submitted URL
rmc.dax.ru/
IP
212.46.196.134
ASN
#3216 PVimpelCom
Submitted
2024-05-04 16:15:57
Access
public
Website Title
Бесплатные Steam аккаунты и Steam игры
Final URL
rmc.dax.ru/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
steamcommunity.com	4728	2006-05-28	2014-03-11	2024-05-03	456 B	64 kB	23.54.13.92
rmc.dax.ru	unknown	2000-11-29	2015-02-12	2024-03-19	5.3 kB	114 kB	212.46.196.134

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam
2024-05-04	medium	rmc.dax.ru/	Steam

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	rmc.dax.ru/	124 B	2023-05-31	2024-05-04
Pretty URL rmc.dax.ru/ IP 212.46.196.134 ASN #3216 PVimpelCom Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-31 13:44:30 Last Seen2024-05-04 18:16:00 Times Seen6 Hash 1b52ec266ce46a06255667317e39bd54 ccc145a5196806477b27d47e2a7b30e45252f063 3f1b86cda7ac34144361a1f75c36c07700c26ecbe29e8720f26435b03a93d4b2 Loading...

HTTP Transactions (17)

URL IP Response Size

rmc.dax.ru/

212.46.196.134

200 OK

12 kB

URL User Request GET HTTP/1.1
rmc.dax.ru/
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

File type
HTML document, Non-ISO extended-ASCII text, with very long lines (334), with CRLF, LF line terminators
Size
12 kB (12357 bytes)
Hash
8f2dbcbdcc6033e97258c2b8412641f8
73236ac9556bb06f804bb055261ca02ee841817b
70afcd9b0965a4b3b9243a8f04eb7fa2f0996481824c5529118e34370ea7807a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET / HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
X-Powered-By: ModLayout/3.4
Content-Type: text/html; charset=windows-1251
Vary: accept-charset, user-agent
Content-Length: 12357
Date: Sat, 04 May 2024 16:15:35 GMT
X-Varnish: 1029545699
Age: 0
Via: 1.1 varnish
Connection: keep-alive

rmc.dax.ru/

212.46.196.134

200 OK

12 kB

URL User Request GET HTTP/1.1
rmc.dax.ru/
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

File type
HTML document, Non-ISO extended-ASCII text, with very long lines (334), with CRLF, LF line terminators
Size
12 kB (12357 bytes)
Hash
8f2dbcbdcc6033e97258c2b8412641f8
73236ac9556bb06f804bb055261ca02ee841817b
70afcd9b0965a4b3b9243a8f04eb7fa2f0996481824c5529118e34370ea7807a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET / HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
X-Powered-By: ModLayout/3.4
Content-Type: text/html; charset=windows-1251
Vary: accept-charset, user-agent
Content-Length: 12357
Date: Sat, 04 May 2024 16:15:35 GMT
X-Varnish: 1029545701
Age: 0
Via: 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/home0000.js

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/home0000.js
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/home0000.js HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073314 1098072836, 1029545702
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/header00.css

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/header00.css
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/header00.css HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073315 1098072836, 1029545705
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/prototyp.js

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/prototyp.js
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/prototyp.js HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073317 1098072836, 1029545704
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/home0000.css

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/home0000.css
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/home0000.css HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073323 1098072836, 1029545710
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/scriptac.js

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/scriptac.js
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/scriptac.js HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073316 1098072836, 1029545706
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/global00.js

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/global00.js
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/global00.js HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073319 1098072836, 1029545707
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/global00.css

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/global00.css
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/global00.css HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073321 1098072836, 1029545708
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/trans000.gif

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/trans000.gif
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/trans000.gif HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073324 1098072836, 1029545713
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/homeBoxH.gif

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/homeBoxH.gif
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/homeBoxH.gif HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073325 1098072836, 1029545715
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/footerLo.gif

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/footerLo.gif
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/footerLo.gif HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073326 1098072836, 1029545714
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/globalhf.png

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/globalhf.png
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/globalhf.png HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073327 1098072836, 1029545712
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/searchbp.gif

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/searchbp.gif
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/searchbp.gif HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073328 1098072836, 1029545716
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/buttonLo.gif

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/buttonLo.gif
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/buttonLo.gif HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073329 1098072836, 1029545717
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

rmc.dax.ru/index_files/favicon0.ico

212.46.196.134

200 OK

6.0 kB

URL GET HTTP/1.1
rmc.dax.ru/index_files/favicon0.ico
IP
212.46.196.134:80
ASN
#3216 PVimpelCom

Requested by
http://rmc.dax.ru/

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.0 kB (6045 bytes)
Hash
d88b901a1d7e95c89120eb71f667d09f
6e188b17134b8198de973f818760e7ef1258c3af
ac3d5756137371eb02dd989fc8fd541eee87dc6403f6ec392c57524ee3f81e23

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam

HTTP Headers

GET /index_files/favicon0.ico HTTP/1.1
Host: rmc.dax.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache
Content-Type: text/html
Accept-Ranges: bytes
X-Cache: MISS from rmc.dax.ru
Content-Length: 6045
Date: Sat, 04 May 2024 16:15:36 GMT
X-Varnish: 1098073330 1098072836, 1029545719
Age: 0
Via: 1.1 varnish, 1.1 rmc.dax.ru, 1.1 varnish
Connection: keep-alive

steamcommunity.com/public/images/homeMessaging/homeMessaging_08.jpg

23.54.13.92

200 OK

64 kB

URL GET HTTP/1.1
steamcommunity.com/public/images/homeMessaging/homeMessaging_08.jpg
IP
23.54.13.92:443
ASN
#16625 AKAMAI-AS

Requested by
http://rmc.dax.ru/
Certificate
IssuerDigiCert Inc
Subjectstore.steampowered.com
Fingerprint03:15:62:D2:00:87:A3:66:F2:B1:19:C5:E4:F1:A5:48:63:D8:80:91
ValidityTue, 05 Dec 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 681x504, components 3
Size
64 kB (63668 bytes)
Hash
2e25015051fdc4194c9b26b73f4fec7c
6d7f1d750509b8ff9add1acb5b4f024837d22934
67e5a781d59497ba66373ea00eaf43e286d37f92fd7bd816b31ed4b7b0084157

HTTP Headers

GET /public/images/homeMessaging/homeMessaging_08.jpg HTTP/1.1
Host: steamcommunity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rmc.dax.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Content-Length: 63668
Last-Modified: Fri, 05 Jan 2018 01:34:49 GMT
ETag: "5a4ed639-f8b4"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Sat, 04 May 2024 16:15:36 GMT
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN