Report - vosotros.ru/

Report Overview

Submitted URL
vosotros.ru/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2023-05-22 18:26:52
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-22	1.3 kB	3.9 kB	104.18.32.68
gg.agency	32017	2016-08-26	2017-01-19	2023-05-22	3.2 kB	157 kB	148.251.68.50
vosotros.ru	unknown	2020-12-21	2020-12-21	2023-05-10	919 B	288 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-22	medium	vosotros.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
2023-05-22	medium	vosotros.ru/

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	vosotros.ru/	53 kB	2023-05-12	2023-05-29
Pretty URL vosotros.ru/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-12 17:51:33 Last Seen2023-05-29 02:11:10 Times Seen20 Hash bcf4171778bb810260ecba2acfe560cb a257674d6e72e561cebdac5eee1b3e202c1978df 07a64d28782da48df796c6ccd06f989d77a028dcf797f086e67cbfe2ea9e0fff Loading...

	vosotros.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-04-23
Pretty URL vosotros.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-23 21:10:43 Times Seen54721 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	vosotros.ru/	278 B	2023-03-14	2024-02-06
Pretty URL vosotros.ru/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 10:40:19 Last Seen2024-02-06 10:48:42 Times Seen54 Hash 94c65080e199cec9552d6b0010e6ab56 6b8ef9341b7c505a09d79fd1e7bf3c00354cc850 b5a75056d50aa3d735fa0dd4a6857f8629a30bc348eb086e007f07534a843278 Loading...

HTTP Transactions (13)

URL IP Response Size

ocsp.sectigo.com/

104.18.32.68

471 B

URL
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8c508256b9b31d1d60e084215cee86bb
ec93250e5481900b6b8c7e61de64a0ce8db0c217
c37592c64e7a4a352c7e1242e8cd8fe4ac6df7c605d97ae486a6d69cc5fe9799

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:44:30 GMT
Expires: Fri, 26 May 2023 10:44:29 GMT
Etag: "ec93250e5481900b6b8c7e61de64a0ce8db0c217"
Cache-Control: max-age=317273,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cb71bba9a7bb51d-OSL

ocsp.sectigo.com/

104.18.32.68

471 B

URL
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8c508256b9b31d1d60e084215cee86bb
ec93250e5481900b6b8c7e61de64a0ce8db0c217
c37592c64e7a4a352c7e1242e8cd8fe4ac6df7c605d97ae486a6d69cc5fe9799

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:44:30 GMT
Expires: Fri, 26 May 2023 10:44:29 GMT
Etag: "ec93250e5481900b6b8c7e61de64a0ce8db0c217"
Cache-Control: max-age=317273,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cb71bba9a69b512-OSL

ocsp.sectigo.com/

172.64.155.188

471 B

URL
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8c508256b9b31d1d60e084215cee86bb
ec93250e5481900b6b8c7e61de64a0ce8db0c217
c37592c64e7a4a352c7e1242e8cd8fe4ac6df7c605d97ae486a6d69cc5fe9799

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:44:30 GMT
Expires: Fri, 26 May 2023 10:44:29 GMT
Etag: "ec93250e5481900b6b8c7e61de64a0ce8db0c217"
Cache-Control: max-age=317273,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cb71bb9ee9b0afa-OSL

gg.agency/images/bg.png

148.251.68.50

200 OK

7.3 kB

URL GET HTTP/1.1
gg.agency/images/bg.png
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
PNG image data, 49 x 118, 8-bit/color RGBA, non-interlaced\012- data
Size
7.3 kB (7283 bytes)
Hash
d7ecab1e5d64bb15b6c975f525010209
7ba37c32d186d01751a2cada6f5224b936efffd4
0bbac0d772d7c12f0804893a7f8b84b126d6b780bc377e2b0012ea7c95535215

HTTP Headers

GET /images/bg.png HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: image/png
Content-Length: 7283
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-1c73"
Expires: Tue, 23 May 2023 18:26:35 GMT
Cache-Control: max-age=86400, public
Accept-Ranges: bytes
X-Frame-Options: DENY

gg.agency/images/logo.png

148.251.68.50

200 OK

14 kB

URL GET HTTP/1.1
gg.agency/images/logo.png
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
PNG image data, 88 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (14242 bytes)
Hash
38e0bac0c1343740535b04e60883187f
9675a2093b7a87fc5c7c257b00891e2bb5549662
02f3be1f4559c838533f1d9e1d32706ddc55460f0a90f387dfc650a770dc404b

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: image/png
Content-Length: 14242
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-37a2"
Expires: Tue, 23 May 2023 18:26:35 GMT
Cache-Control: max-age=86400, public
Accept-Ranges: bytes
X-Frame-Options: DENY

ocsp.sectigo.com/

104.18.32.68

471 B

URL
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8c508256b9b31d1d60e084215cee86bb
ec93250e5481900b6b8c7e61de64a0ce8db0c217
c37592c64e7a4a352c7e1242e8cd8fe4ac6df7c605d97ae486a6d69cc5fe9799

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:44:30 GMT
Expires: Fri, 26 May 2023 10:44:29 GMT
Etag: "ec93250e5481900b6b8c7e61de64a0ce8db0c217"
Cache-Control: max-age=317273,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cb71bba9ff1b50b-OSL

gg.agency/index/images/icons/favicon.png

148.251.68.50

200 OK

3.7 kB

URL GET HTTP/1.1
gg.agency/index/images/icons/favicon.png
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3665 bytes)
Hash
1e4ec48153fdb0f2b5e528b9b84c000d
8ef12bf564d858974b0e0f4133d9e768b4f1c762
9aa0e7b0a7f65cf11af5c8277bdc2279ea935afeb9042b34902885443cf57bff

HTTP Headers

GET /index/images/icons/favicon.png HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: image/png
Content-Length: 3665
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-e51"
Expires: Tue, 23 May 2023 18:26:35 GMT
Cache-Control: max-age=86400, public
Accept-Ranges: bytes
X-Frame-Options: DENY

gg.agency/fonts/SegoeUI-Light.woff

148.251.68.50

200 OK

32 kB

URL GET HTTP/1.1
gg.agency/fonts/SegoeUI-Light.woff
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 184448, version 0.0\012- data
Size
32 kB (32432 bytes)
Hash
60b5242697804c19f031292669f32578
d9bddb21eafbd914be056bac88e85e15d2a3877a
04cfadce6a1cd37241cac32cc0dc9bd50bff463017fdd1227e67734b2147d1c7

HTTP Headers

GET /fonts/SegoeUI-Light.woff HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vosotros.ru
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/font-woff
Content-Length: 184448
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-2d080"
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Frame-Options: DENY

gg.agency/fonts/SegoeUI-Light.ttf

148.251.68.50

200 OK

32 kB

URL GET HTTP/1.1
gg.agency/fonts/SegoeUI-Light.ttf
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
TrueType Font data, digitally signed, 20 tables, 1st "DSIG"\012- data
Size
32 kB (32429 bytes)
Hash
f1486ce3446a0ea8016130adf110f970
211dbed32d9f6d5b406e07b0d53bdc116842adfe
df7cdc00ffe939f8ba6a40ef1cf3993ccddd9411d3a88e9bac1728f26d0c3308

HTTP Headers

GET /fonts/SegoeUI-Light.ttf HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vosotros.ru
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/octet-stream
Content-Length: 330908
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-50c9c"
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Frame-Options: DENY

vosotros.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

188.114.97.1

200 OK

1.2 kB

URL GET HTTP/3
vosotros.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://vosotros.ru/
Certificate
IssuerGoogle Trust Services LLC
Subject*.vosotros.ru
Fingerprint26:FC:BA:B1:CE:1E:40:F9:65:B8:97:16:49:9C:D1:AC:14:81:21:FC
ValidityTue, 28 Mar 2023 14:36:53 GMT - Mon, 26 Jun 2023 14:36:52 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: vosotros.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 22 May 2023 18:26:34 GMT
content-type: application/javascript
last-modified: Thu, 18 May 2023 12:47:19 GMT
etag: W/"64661e57-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A3jwRD9LpvMwO9t8oK2iweuJ%2Fl9QNgRoICQhir3hJGobTim3gIw09%2F%2Brte8fmuTf09nVPZRbgyxaAOJ1d51rDl%2BT04GXoH6lproS6H8bEGQKQaI9WqzybaX6xKgeYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cb71bb8a90e0b49-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 24 May 2023 18:26:34 GMT
cache-control: max-age=172800, public
content-encoding: gzip

gg.agency/fonts/SegoeUI.woff

148.251.68.50

200 OK

32 kB

URL GET HTTP/1.1
gg.agency/fonts/SegoeUI.woff
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 283652, version 0.0\012- data
Size
32 kB (32432 bytes)
Hash
7930e053375ce00891947e074cd2312d
01df8d44ea55f3206f769480760bf52c1123905f
1d017eda7d54a512ba145f3b4d59709774cb397f139f1df4e7cfd10b06a02529

HTTP Headers

GET /fonts/SegoeUI.woff HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vosotros.ru
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/font-woff
Content-Length: 283652
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-45404"
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Frame-Options: DENY

vosotros.ru/

188.114.97.1

200 OK

285 kB

URL User Request GET HTTP/2
vosotros.ru/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject*.vosotros.ru
Fingerprint26:FC:BA:B1:CE:1E:40:F9:65:B8:97:16:49:9C:D1:AC:14:81:21:FC
ValidityTue, 28 Mar 2023 14:36:53 GMT - Mon, 26 Jun 2023 14:36:52 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (53304)
Size
285 kB (284876 bytes)
Hash
750f4f0df685f7b36f6c534c00de191a
d37250056029b1aba3e7a05cc27a009052424cf8
0bef6fbde88f7e0d0cd7994410235c9d7c752cd542b820764407ac131d3f01d1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: vosotros.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 22 May 2023 18:26:34 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.18
cache-control: no-cache
x-frame-options: DENY
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YYnjA%2FvIHzpqYOW997X6D0JBqmwcwFNi3z%2FrH0Owc8lo%2F7BDu1kEndN2rdZkYc83%2FQsuCGZcYJnvjgPsavESXxM5OIYkyy9geg3gcmMxsjhi1EP7eV0Wq45OaBfCog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb71bb6196eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

gg.agency/fonts/SegoeUI.ttf

148.251.68.50

200 OK

32 kB

URL GET HTTP/1.1
gg.agency/fonts/SegoeUI.ttf
IP
148.251.68.50:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://vosotros.ru/
Certificate
IssuerSectigo Limited
Subject*.gg.agency
Fingerprint73:57:49:07:86:35:ED:D3:DE:57:E2:35:90:D2:88:22:DF:74:2B:F0
ValidityTue, 16 Aug 2022 00:00:00 GMT - Fri, 15 Sep 2023 23:59:59 GMT

File type
TrueType Font data, digitally signed, 22 tables, 1st "DSIG"\012- data
Size
32 kB (32429 bytes)
Hash
c9635b42e95a81128cdfa4d02ab7127a
ff7bfd410427486b422ebae442b6cfdb47650151
4030fbcdbf1104f8378546e7925f3a372490daee2653f8fd3f400ff0e16a63f0

HTTP Headers

GET /fonts/SegoeUI.ttf HTTP/1.1
Host: gg.agency
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vosotros.ru
DNT: 1
Connection: keep-alive
Referer: https://vosotros.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 May 2023 18:26:35 GMT
Content-Type: application/octet-stream
Content-Length: 519852
Connection: keep-alive
Last-Modified: Fri, 19 May 2023 10:28:44 GMT
ETag: "64674f5c-7eeac"
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
X-Frame-Options: DENY

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP