detect.money 
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
2 months
Reports sent
1
Current status
Observed active at latest stored check
Sicurezza del dominio e intelligence sulle minacce
vozvrat-info[.]net
“Быстрый правовой разбор вашей ситуации”
Verdetto di minaccia
Critico
Punteggio delle prove 78/100
Disponibilità
Non verificato
La raggiungibilità attuale non è verificata
Segnali di rischio
Rilevamenti VirusTotal: 5/91
Tipo di truffa: Generic Phishing
Riepilogo delle prove
CRITICO
This domain, vozvrat-info.net, is flagged as a generic phishing site targeting individuals seeking legal consultation services. The page title, "Быстрый правовой разбор вашей ситуации" (translated: "Quick legal analysis of your situation"), suggests an attempt to impersonate legitimate legal advisory platforms. No specific brand impersonation or drainer kit signatures were identified, but the use of tracking technologies such as Facebook Pixel and IPinfo indicates an intent to profile victims for further exploitation or targeted follow-up attacks.
Infrastructure analysis reveals the domain was registered through Porkbun LLC on May 13, 2026, and resolves to the IP address 168.231.116.217. The domain is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Technologies detected include Nginx as the web server, jQuery for dynamic content, and third-party tracking tools, which are often leveraged to monitor victim interactions or exfiltrate data.
As of the latest assessment, vozvrat-info.net has been taken offline, likely in response to detection and blocking by security systems. However, the elevated risk persists due to the domain's recent registration and the potential for the threat actors to redeploy the infrastructure under a new domain or IP address. Organizations and individuals are advised to monitor for similar phishing campaigns targeting legal or financial services, particularly those using Cyrillic-language content and third-party tracking technologies. Blocking the resolved IP address (168.231.116.217) at the network level and updating endpoint protection rules to flag domains registered through Porkbun LLC with recent creation dates may mitigate residual risk.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260528-BEA2D4- Titolo della pagina acquisita
- Быстрый правовой разбор вашей ситуации
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Policy Violations:
Section 3.1 of AUP: The domain vozvrat-info.net is engaged in phishing activities, which is explicitly prohibited under your Acceptable Use Policy.
Section 5.2 of TOS: The domain is being used for fraudulent purposes, violating the terms that reserve your right to suspend or terminate services for such actions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: Prohibits unauthorized access to computers and fraud related to computer systems, applicable to phishing schemes.
Wire Fraud Statute - 18 U.S.C. § 1343: Criminalizes schemes to defraud individuals or entities via electronic communications, which encompasses phishing activities.
CAN-SPAM Act - 15 U.S.C. § 7701: Regulates commercial email and prohibits deceptive practices, including phishing emails.
Regulatory Note: Failure to take appropriate action against this domain may result in liability under applicable laws and could lead to regulatory scrutiny. Immediate compliance is advised to mitigate potential legal repercussions.
Section 3.1 of AUP: The domain vozvrat-info.net is engaged in phishing activities, which is explicitly prohibited under your Acceptable Use Policy.
Section 5.2 of TOS: The domain is being used for fraudulent purposes, violating the terms that reserve your right to suspend or terminate services for such actions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: Prohibits unauthorized access to computers and fraud related to computer systems, applicable to phishing schemes.
Wire Fraud Statute - 18 U.S.C. § 1343: Criminalizes schemes to defraud individuals or entities via electronic communications, which encompasses phishing activities.
CAN-SPAM Act - 15 U.S.C. § 7701: Regulates commercial email and prohibits deceptive practices, including phishing emails.
Regulatory Note: Failure to take appropriate action against this domain may result in liability under applicable laws and could lead to regulatory scrutiny. Immediate compliance is advised to mitigate potential legal repercussions.
VirusTotal
5 det.
URLQuery
1 det.
Certificato TLS
Let's Encrypt
Età
3 mo
Stato osservato
Non verificato
Elenco da eliminare
Presente
Reports Sent
1
Data Coverage
VirusTotal
5 / 91
URLQuery
1 det.
PhishStats
non controllato
OTX
no community references
CF Radar
scan completed
URLScan capture
rapporto memorizzato
URLScan verdict
Analisi completata
Blocchi DNS
non controllato
TLS
valid certificate, 62d
WHOIS
3 mo old
Screenshot
3 captures · 3 sources
Catena di reindirizzamenti
non sondato
Pipeline di risposta alle minacce
Scoperta
Checks
Reports
Disponibilità
10/11
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
MetaMask
Nessuna corrispondenza
ScamSniffer
Nessuna corrispondenza
Polkadot
Nessuna corrispondenza
CryptoFirewall
Nessuna corrispondenza
OpenPhish
Nessuna corrispondenza
SEAL
Nessuna corrispondenza
Enkrypt
Nessuna corrispondenza
Phishunt
Nessuna corrispondenza
Codeesura
Nessuna corrispondenza
DiscordPhishing
Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
3 → 5
Acquisizione salvata
Analisi dei domini
Dominio
URLScan Verdict
Analisi completata
score 0 report ↗
Server / ASN
nginx/1.22.1 · AS47583 AS-HOSTINGER Hostinger International Limited, CY
Reputazione IP
IP abuse confidence 0/100 0 reports checked 12/08/2026
Registrar
Porkbun
(US)
(US)
RegistrazioneCreato 13/05/2026 (92d) — Expires 13/05/2027
Dettagli tecniciDNS, nomi TLS e date
Rilevato per la prima volta28/05/2026
DOM Analysisanalyzed 15/06/2026DOM analysis score 78/100
Submitted URLhttps://vozvrat-info.net/?… query redacted
Nameservercuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.com
MX Records10 fwd1.porkbun.com 20 fwd2.porkbun.com
Impronta TLS
Osservazione TLSvalido dal 29/05/2026analizzato il 15/06/2026
Nomi alternativi del soggetto TLSwww.vozvrat-info.net
Favicon Hash
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
L’accreditamento è un contratto, non un sigillo di sicurezza.
Verifica le tariffe ICANN
Leggi il RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Tecnologie
4 tecnologie identificate con alta affidabilità
Nginx
jQuery
IPinfo
Facebook Pixel
Cloudflare Radar
Segnala questo dominio
Invia le prove e contribuisci a proteggere gli altri
Analisi di VirusTotal
5 / I fornitori di sicurezza 91 hanno contrassegnato questo dominio
View on VT
Last analyzed Previous stored snapshot: 5 detections
alphaMountain.ai
CRDF
Forcepoint ThreatSeeker
Gridinsoft
SOCRadar
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of vozvrat-info.net · checked Jun 26, 2026
62
Needs Work
Performance
FCP
4.81s
First Contentful Paint
LCP
6.93s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
68ms
Total Blocking Time
SI
5.77s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Infrastruttura e rapporti correlati
Stesso registrar: Porkbun 6
Rapporti recenti sulle minacce 6
Rapporti aggiunti di recente dal database PhishDestroy. Questi collegamenti di scoperta non implicano infrastrutture o proprietà condivise.
Questo sito ti ha influenzato in qualche modo?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Europol
Trova il canale di segnalazione ufficiale per il tuo paese dell'UE
National police directory
Action Fraud
Segnala frodi e crimini informatici in Inghilterra, Galles e Irlanda del Nord
Contact centre0300 123 2040
PhishDestroy listing review Non un rapporto delle forze dell'ordine
Ricorso in materia di domini
Richiedi una revisione se possiedi questo dominio e ritieni che l'elenco non sia corretto
Attenzione ai truffatori che promettono il recupero dei fondi! I criminali possono contattare nuovamente le vittime fingendo di essere investigatori, avvocati o agenti di recupero. Non pagare commissioni anticipate né condividere credenziali. Scopri di più sulle frodi relative ai sussidi di recupero →
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Elenco di 97 paesi
Bozza assistita dall'intelligenza artificiale: i dettagli dell'incidente vengono elaborati dal fornitore di intelligenza artificiale
Controllalo e invialo tu stesso
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo
