{"report_id":"52e295ab-4f9f-40e1-9406-fa3115f63f18","version":6,"status":"done","tags":[],"date":"2026-03-17T07:41:39Z","url":{"schema":"https","addr":"krab5c---c.ru","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"krab5c---c.ru/","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"title":"krab5.cc — промышленные дегидраторы и сушилки в Москве","dom":{"size":25467,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b79625c848d707781574f9a22d6c1308","sha1":"2c76ccf909c79d254858bc2d2e5b1d44c944db90","sha256":"4c30467b5a4d3035767ba69448ca350042edae39f05cb87584c1a16903ae3621","sha512":"e9d4f10d0089ea783e046700268b1525d88ee1b19d7f3053aaba16e922e60f56ec5451851602adb20c263c3e294a4f3904ce0962136eaa4236abb2da010737a6","ssdeep":"384:zrnj9GE75vkTsAFMPPJdQJsD21u8aObNgDI+:3nj9GE1I1FMPPJdzDY/NoI+","tlshash":"38b2ee6056ea18db1104b41bdd04bf4d7caa44bf3b6a2727356c2daf7fd2024ca2e719","dom_hash":"domhash6a92e47e1cf4357d20ffd570a8a89ce5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab5c---c.ru","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T07:41:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krab5c---c.ru","ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-03-17T07:41:39.364065Z","last_seen":"2026-03-17T07:41:39.364065Z","alert_count":0,"request_count":2,"received_data":30743,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab5c---c.ru/","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"942db124eb2cf68769465865d1ca3f45","sha1":"2a59151d7082f70f7bef99532a67eed4db7ac944","sha256":"8368cefe0573c57d8878862ace58ecb3e459728b649a017ad256b42a962f32bf","sha512":"3efa6655a06212bb8e2a99d4672940690552b73c3b9cd5bb9dfa3ac062bc76d42efc93e82d6af26818ca481796951dcfc7cd96ab3c0fb2e17792fd2ecb76d43c","ssdeep":"","tlshash":"16f041e73c8a003cc3b302653b739248303a253f380ead13b80c1c923f80e6514a790c","size":621,"data":"","first_seen":"2026-03-17T07:41:42.323943Z","last_seen":"2026-03-17T07:41:42.323943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab5c---c.ru/","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T07:41:17.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 16:44:03 GMT","end":"Fri, 05 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"07:3C:23:91:4C:31:03:C9:C1:2B:92:B4:35:DF:9D:24:67:7B:54:9E","sha256":"A5:B2:DC:1A:65:C3:41:AC:93:D1:B2:7C:96:CD:D8:72:24:9C:72:B4:EE:12:A7:64:E7:0D:38:D7:3E:A7:60:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab5c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 07:41:18 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 07 Mar 2026 15:50:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ac4945-657a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25978,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"3f42e409cbb3cf488b0351bee9d29a52","sha1":"4b7ab6e5ead70ae90420cbdfc4b4bd79ad473363","sha256":"bb657e8058779fe374b543753fb650c79c90f68cac78a3030419cad8e1b6630a","sha512":"4f90fe51d57dda8d09455ff196883925be61e7c8b5c1cf017dd7b73eb07613c07a04e8ba5377b9240433b3b8987a687001f1295efc3611e6be955b063dd9ccee","ssdeep":"384:trnj9GE75vkTsAFMPPJdQJsD21u8aObNgDIW:Nnj9GE1I1FMPPJdzDY/NoIW","tlshash":"56b2ef6056ea18db1104b41bdd04bf4d7caa44bf3b6a2727356c2daf7fd2024ca2e719","first_seen":"2026-03-17T07:41:42.31862Z","last_seen":"2026-03-17T07:41:42.31862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":151,"dns":82,"connect":34,"send":0,"wait":34,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab5c---c.ru/favicon.ico","fqdn":"krab5c---c.ru","domain":"krab5c---c.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab5c---c.ru/","date":"2026-03-17T07:41:18.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab5c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 16:44:03 GMT","end":"Fri, 05 Jun 2026 16:44:02 GMT"},"fingerprint":{"sha1":"07:3C:23:91:4C:31:03:C9:C1:2B:92:B4:35:DF:9D:24:67:7B:54:9E","sha256":"A5:B2:DC:1A:65:C3:41:AC:93:D1:B2:7C:96:CD:D8:72:24:9C:72:B4:EE:12:A7:64:E7:0D:38:D7:3E:A7:60:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab5c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab5c---c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 07:41:18 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 07 Mar 2026 15:50:28 GMT\r\nConnection: keep-alive\r\nETag: \"69ac4944-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-07-09T23:44:10.509773Z","times_seen":47,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}