{"report_id":"35235c5a-5885-434c-980e-80052c26d230","version":6,"status":"done","tags":[],"date":"2026-01-13T11:53:56Z","url":{"schema":"https","addr":"krab1ats.ru","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"krab1ats.ru/","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"title":"Krab1 at — утренние часы тишины и неспешное включение в день","dom":{"size":11513,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8eeedc445afaaba88b915d4815c46aeb","sha1":"b27cf49fdb9a13fc649930b77dffd74e98b256eb","sha256":"17948a41dcfd07d2b1e71187bac924b4de6be115f99b66a7de1816dc816309d7","sha512":"cc2dcf0fa50dc927f8fb12da903989e2e5b5fcf57f58bc0123eb78175b89f6fe2eca5d33cb22705cdd529d669dd095cd1f2f1d63099af527a43468b5b27bce82","ssdeep":"192:FKbgGq3bQL3kM5HZwKVWwsTKFcUEHViHdiC:FKbKhYZVVWwzFcUE1iHdiC","tlshash":"8f32323178fb186b1002602ae9607f09bcba847f6b16475235ec6e7e2ff1f91ca17159","dom_hash":"domhash1eb59c0e1efa0340bb5f966bd22aa2cf","first_seen":"2026-01-13T11:54:17.699769Z","last_seen":"2026-01-13T11:54:17.699769Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab1ats.ru","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T11:53:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krab1ats.ru","ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":145717,"sent_data":2623,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab1ats.ru/","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c9e6ea64d7207dc6eb024c2de95bb3","sha1":"8f3b34184d86e40c4f1f63108a4c0a1d87214f23","sha256":"22e5ea510dda2a6f99a197095b2205969085d6667025d714ca2e63cf987716f5","sha512":"0d243d337c5b633e4a968f85ebd1921b4a159d0df9da7d91974d5bff2c5d1018f3db16ae8e94a62092a7a299b3cdf54478e8ea952e13a105b7ff064d5b85ca5d","ssdeep":"","tlshash":"c4f020b63cc94034c3b712652bb391487039292fb40ead11f56c18a23f9086608ab92c","size":572,"data":"","first_seen":"2025-11-22T21:17:09.388185Z","last_seen":"2026-01-13T11:54:17.706079Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4eca6750ffa366da2e5ec85e481f66dd","sha1":"9dea1e15e43fdedb0bb5c23d2caf9db8f2f46f69","sha256":"edcd0b7a46e69807845fb276e03e5a32c1521ec3720c3f190ecdb5484bae6dd0","sha512":"06fc532338eb9d2fee7f5b5ed352cf31320040c3dfbd557a8963ff2f4b20bacec509cc24f1fdc30cf845bca9a9b5addf3aa652e0a363fb68de73b68845ec0de0","ssdeep":"","tlshash":"d93157377e70263406f69097b9fb5d486435040a7705c384b95cc74e4735fd8a1b6f86","size":1519,"data":"","first_seen":"2025-11-17T20:02:39.223814Z","last_seen":"2026-01-13T11:54:17.706919Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/script.js?v=1768305213945","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3c62d0ffd3684196f034c08bbac448","sha1":"1bcdc9e39f3956c0e2d7872343380ecdea468c73","sha256":"5d8933fec1158b41ff96b9091fbe30919771a0fc0e407247850b856640c51649","sha512":"17855bfd79eec516c04ea38545c225f1ccdd08967fd0d32bb499810c5d1b95a513b3ebc1315caea4cdc23b96f79370eef0e369b25231eabfdc67356117fe8a66","ssdeep":"","tlshash":"3ee02b7961a298b00ab771af63d71284b07a40af7809d0c1781c4c184f149d553a7f59","size":403,"data":"","first_seen":"2026-01-05T16:51:03.495523Z","last_seen":"2026-01-13T11:54:17.701095Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab1ats.ru/script.js?v=1768305213945","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1ats.ru/","date":"2026-01-13T11:53:33.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET /script.js?v=1768305213945 HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1ats.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 31 Dec 2025 11:14:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69550581-193\"\r\nExpires: Wed, 14 Jan 2026 11:53:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9b3c62d0ffd3684196f034c08bbac448","sha1":"1bcdc9e39f3956c0e2d7872343380ecdea468c73","sha256":"5d8933fec1158b41ff96b9091fbe30919771a0fc0e407247850b856640c51649","sha512":"17855bfd79eec516c04ea38545c225f1ccdd08967fd0d32bb499810c5d1b95a513b3ebc1315caea4cdc23b96f79370eef0e369b25231eabfdc67356117fe8a66","ssdeep":"","tlshash":"3ee02b7961a298b00ab771af63d71284b07a40af7809d0c1781c4c184f149d553a7f59","first_seen":"2026-01-05T16:51:03.495523Z","last_seen":"2026-01-13T11:54:17.701095Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/css2?family=Roboto\u0026display=swap","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab1ats.ru/","date":"2026-01-13T11:53:33.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET /css2?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1ats.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:33 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T15:58:18.08555Z","times_seen":549094,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/style.css","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krab1ats.ru/","date":"2026-01-13T11:53:33.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1ats.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 31 Dec 2025 11:14:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69550581-310d\"\r\nExpires: Wed, 14 Jan 2026 11:53:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12557,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a3ada102f63d9538e588ccf599774831","sha1":"53e759ede3218fb614ea1c58331b4a12dca697ad","sha256":"ff9988b42ff2ce1d2ee6b20f415f87ff7ea83b3cb5f927b93c0882509e322c03","sha512":"d9ab80101185fdf59832fb1f2b63704594c9ef814c6f5f7d5b6e964f55fe7ab0c826699d8d221a4da917a34e9622c9968eefbcf0785d19ca924a092bf53b221a","ssdeep":"192:7UNAsvsQc0pqijkZBu327pDPIhkCnlfNwOzYs165lNoNxo4f/faGUpu1LT:IN7l04hk2ENofBHNd","tlshash":"e2421fd72ba81504791ad4b8bd92db5673acd443c10fcdb87bf4206cadca3d549a2b8c","first_seen":"2025-12-31T18:53:56.781083Z","last_seen":"2026-04-13T10:44:14.168697Z","times_seen":34,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/favicon.ico","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1ats.ru/","date":"2026-01-13T11:53:34.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1ats.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:34 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 101392\r\nLast-Modified: Wed, 31 Dec 2025 11:14:09 GMT\r\nConnection: keep-alive\r\nETag: \"69550581-18c10\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T11:53:33.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"634cff18cde9564301902ae93611c939","sha1":"f614612e17f23aeb8e55bb41fede693689cf17c5","sha256":"63ab5c5ba4bc6da1b26181edb027ba3e1e062f8094755ea5d08f7f3f026472d3","sha512":"8411c87291e3c3a505a11811394c53bbd4a00370c45433a0f62abbd1408c3b8ef9b504d2eb271ecb887dff98805b90666e8623b54f9eee973e45b51989a50557","ssdeep":"192:pSSq7GC5QfOWJHPvazjImUy9yMGEmaikni1:pSSZdPCzjI1y9yMGEtikni1","tlshash":"1232113129d7686a1432602ae9207f48fdba847f6b06475235ec2f6f2ff2f50ca57158","first_seen":"2026-01-13T11:54:17.704003Z","last_seen":"2026-01-13T11:54:17.704003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":128,"dns":52,"connect":36,"send":0,"wait":43,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1ats.ru/images/2.png","fqdn":"krab1ats.ru","domain":"krab1ats.ru","tld":"ru"},"ip":{"addr":"185.208.158.29","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1ats.ru/","date":"2026-01-13T11:53:33.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1ats.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 08:41:11 GMT","end":"Tue, 31 Mar 2026 08:41:10 GMT"},"fingerprint":{"sha1":"14:6B:68:7F:C7:36:3F:92:6E:E9:6E:05:3B:37:D2:4C:01:0D:64:FA","sha256":"AE:C9:6E:55:72:A2:EA:2F:AA:86:81:FC:10:92:D3:5F:83:29:A7:55:3B:67:9D:D9:1A:E2:61:AC:88:DB:C6:78"}}},"request":{"raw":"GET /images/2.png HTTP/1.1\r\nHost: krab1ats.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1ats.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 13 Jan 2026 11:53:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 18004\r\nLast-Modified: Wed, 31 Dec 2025 11:14:10 GMT\r\nConnection: keep-alive\r\nETag: \"69550582-4654\"\r\nExpires: Wed, 14 Jan 2026 11:53:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 120, 8-bit grayscale, non-interlaced","md5":"d45f6fd593c1313b5150a49314983521","sha1":"b85eeba8b012cca6111872b955030dd7f562ffa1","sha256":"854e0eb687a3472c7774c5f63b9604323b2eb40ccd2e54ad3eb95669fb08e9e0","sha512":"be341ce2fa4d08c0c39ffdd562632736e3b8f5faea0ffd17379e715f406acfed4fcf454b14652aa07a27daedc048ac911b5e688cce67f25a44e0fdae81eab00c","ssdeep":"384:HKxPbN13gKOuzTjzyo1+TuQ5Su42kUe1muE+:H2PQUyo1WpAA6","tlshash":"8f82d0f8a87c5de3cc31161a8b1c64be814616ead3ee9288435dd7580e7613ce5e6f80","first_seen":"2025-12-31T18:53:56.783562Z","last_seen":"2026-04-13T10:44:14.169895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}