{"report_id":"30c8541d-5e82-454c-839d-9d1867ccd594","version":6,"status":"done","tags":[],"date":"2026-03-17T16:11:43Z","url":{"schema":"https","addr":"captcha-slon3cc.ru","fqdn":"captcha-slon3cc.ru","domain":"captcha-slon3cc.ru","tld":"ru"},"ip":{"addr":"205.185.113.136","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"captcha-slon3cc.ru/","fqdn":"captcha-slon3cc.ru","domain":"captcha-slon3cc.ru","tld":"ru"},"title":"Почему люди коллекционируют самые странные вещи на Slon3 cc","dom":{"size":23102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1342)","md5":"90540ed0a33b444ad70e1f87b84a7266","sha1":"02d64cdf38dc2648ad2ec8116b8f08660c2d53fd","sha256":"a72270ac532eb49033caa772de8f1e85163518cfdcf46e2c4c8831160af9e610","sha512":"8b25d7a27575154699eb5d9311e57fc2db38eca5fb2e25f28c2ffa80477bbf5a1d78ec916fc892900ee063ebdb7052458468b3967c788e2d3884b3c9f86b2204","ssdeep":"384:3kvQWGvY990Abr/koKbHAvAJTotxCnFo9vQa1W1hie1sFZ9cA6MkPbylZkQnFcg5:K0OvAVQuMQJ1hie1sFZ+A6HP+Tdn","tlshash":"9aa2bd72948e88dd1101b406e8087f0d3da685bf7f9aa35325682d7f36f70a4c63a75e","dom_hash":"domhash56fe01ca7629886ab7ad83374e8702c8","first_seen":"2026-03-17T16:11:46.7844Z","last_seen":"2026-03-17T16:11:46.7844Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"captcha-slon3cc.ru","fqdn":"captcha-slon3cc.ru","domain":"captcha-slon3cc.ru","tld":"ru"},"ip":{"addr":"205.185.113.136","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T16:11:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"captcha-slon3cc.ru","ip":{"addr":"205.185.113.136","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-03-17T16:11:43.824711Z","last_seen":"2026-03-17T16:11:43.824711Z","alert_count":0,"request_count":1,"received_data":23810,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3.firstvds.ru","ip":{"addr":"37.230.115.231","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2002-08-06","domain_rank":0,"first_seen":"2025-09-11T11:42:54.692973Z","last_seen":"2026-03-17T07:46:39.619571Z","alert_count":0,"request_count":2,"received_data":51018,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"captcha-slon3cc.ru/","fqdn":"captcha-slon3cc.ru","domain":"captcha-slon3cc.ru","tld":"ru"},"ip":{"addr":"205.185.113.136","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T16:11:21.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"captcha-slon3cc.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:55:43 GMT","end":"Mon, 15 Jun 2026 02:55:42 GMT"},"fingerprint":{"sha1":"76:42:D1:46:27:15:50:4C:99:A1:0E:61:AC:1B:8F:A3:2E:31:FE:E8","sha256":"C0:61:F7:0D:41:E3:3F:FB:FD:46:6C:A0:21:5F:98:4B:E4:0C:3C:14:67:95:0D:09:D3:C2:65:D6:7A:36:7A:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha-slon3cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 16:11:21 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 17 Mar 2026 07:58:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b909a4-5c0f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23567,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1342)","md5":"4a80f5a30cc38f8d5f47af6d0f1f94f0","sha1":"ebd1f127fd6616cd78b2b06b1d721711c10c0927","sha256":"0d6f909d86d7f0b15565fbd117b75f897650a5d3622fbe6374f524e794209a7e","sha512":"c2805e17d3f884fadba9954a7fedf8dd4dbf7e6374253d321a3079e244581432faac7ee583b717193cbd3cc41ca90321319098fb0e73a2691b6aaf763198b4f8","ssdeep":"384:xkvQWGvYfAbr/koKbHAvAJTbtxCnFo9vQa1W1hie1sFZ9cA6MzPbylZkQnFcgpV:cfOvAVhuMQJ1hie1sFZ+A6cP+TdV","tlshash":"75a2be72948e88dd1101b406e8087f0d3da685bf7f9aa35325682d7f36f70a4c63a75e","first_seen":"2026-03-17T16:11:46.788558Z","last_seen":"2026-03-17T16:11:46.788558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":358,"dns":64,"connect":144,"send":0,"wait":145,"receive":1,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.firstvds.ru/fotohosting/2026/03/09/1000008538.jpg","fqdn":"s3.firstvds.ru","domain":"firstvds.ru","tld":"ru"},"ip":{"addr":"37.230.115.231","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://captcha-slon3cc.ru/","date":"2026-03-17T16:11:22.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.firstvds.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 20 Mar 2025 04:39:49 GMT","end":"Tue, 21 Apr 2026 04:39:48 GMT"},"fingerprint":{"sha1":"A1:53:6E:3C:AE:79:AC:3F:3A:EB:2F:8B:34:F3:D2:2E:0A:04:99:23","sha256":"9E:F8:2D:5F:14:DA:31:6C:58:17:B6:A8:B1:FB:AF:6B:A4:B6:D4:2F:60:C7:C2:4F:19:18:6C:64:66:B1:5D:48"}}},"request":{"raw":"GET /fotohosting/2026/03/09/1000008538.jpg HTTP/1.1\r\nHost: s3.firstvds.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha-slon3cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 17684\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 09 Mar 2026 07:34:29 GMT\r\nx-rgw-object-type: Normal\r\nETag: \"294c36bfed5fcb6cd967ab5421720952\"\r\nCache-Control: public, max-age=31536000\r\nx-amz-request-id: tx000000b76db05a26f6d7f-0069b97d2a-114197213-default\r\nContent-Type: image/jpeg\r\nServer: Ceph Object Gateway (tentacle)\r\nDate: Tue, 17 Mar 2026 16:11:22 GMT\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=[*0*], width=0], baseline, precision 8, 1104x384, components 1","md5":"294c36bfed5fcb6cd967ab5421720952","sha1":"71e0d47efcb9f358fb9a6dcbe88c13a95ac8d49d","sha256":"c17ee0ff5602c2084e1d2cc2d98ca71eb533d6e00ddd9e94e17805a93b47e74e","sha512":"0edb200aa59a7322293722253300a2c1d993f054c734c82b0fdfd47e50ac10a1d0526aa3604d09f11c25e3d69c35e95778da6044a6a20ddafb39e65152290206","ssdeep":"384:g2dL/BpuFqS0+m9/Uk5X6q8CVDxfAlypyKoFmGcjK3ZBo/kTxqz7mW7:NdL/BpuSCCwcE/FmGcjK3Z9VqOA","tlshash":"a182d0fd03467392f197f7b0a233a302d9983a0b5c986327157006b2b921e85bcd9add","first_seen":"2026-03-17T07:46:42.016159Z","last_seen":"2026-05-20T20:23:54.186487Z","times_seen":43,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":110,"dns":1,"connect":36,"send":0,"wait":37,"receive":35,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.firstvds.ru/fotohosting/2026/03/09/1000008492.jpg","fqdn":"s3.firstvds.ru","domain":"firstvds.ru","tld":"ru"},"ip":{"addr":"37.230.115.231","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha-slon3cc.ru/","date":"2026-03-17T16:11:22.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.firstvds.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 20 Mar 2025 04:39:49 GMT","end":"Tue, 21 Apr 2026 04:39:48 GMT"},"fingerprint":{"sha1":"A1:53:6E:3C:AE:79:AC:3F:3A:EB:2F:8B:34:F3:D2:2E:0A:04:99:23","sha256":"9E:F8:2D:5F:14:DA:31:6C:58:17:B6:A8:B1:FB:AF:6B:A4:B6:D4:2F:60:C7:C2:4F:19:18:6C:64:66:B1:5D:48"}}},"request":{"raw":"GET /fotohosting/2026/03/09/1000008492.jpg HTTP/1.1\r\nHost: s3.firstvds.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha-slon3cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 32496\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 09 Mar 2026 07:52:49 GMT\r\nx-rgw-object-type: Normal\r\nETag: \"b11bf84d10c12754b1077fc5c6eb3d1d\"\r\nCache-Control: public, max-age=31536000\r\nx-amz-request-id: tx000006bd00bd3a0325c77-0069b97d2a-114055950-default\r\nContent-Type: image/jpeg\r\nServer: Ceph Object Gateway (tentacle)\r\nDate: Tue, 17 Mar 2026 16:11:22 GMT\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x900, components 3","md5":"b11bf84d10c12754b1077fc5c6eb3d1d","sha1":"258c1b88f0a891056e674aa1fbde129b4b1ff5c5","sha256":"a189774f593b18d6613069947f864f35050395800ed95153edf350d1363c0411","sha512":"ab045d9b54435fd18c72a023a47af764954ed4387c6e056ef047ba7723d7d4a09fbef32d715787ff887f5d1545a18a11c10dfa0d86079e177c47fd6dd287b106","ssdeep":"768:Vq+cRth/Av1xopsUGFVIHxwwN17dx+OuC5A+:VfM/AvvotGrIRPN9Zy+","tlshash":"ade2e1e7a61f825fdb873b350ee35f720f9a43d6659675f28700ac2ca42e1242cd5280","first_seen":"2026-03-17T07:46:42.01706Z","last_seen":"2026-04-14T18:17:22.243999Z","times_seen":35,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":31,"receive":36,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}