{"report_id":"59407288-d044-4bc4-8e10-09cd31dea800","version":6,"status":"done","tags":[],"date":"2026-03-28T22:43:50Z","url":{"schema":"https","addr":"krabs2-cc.ru","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"172.67.133.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krabs2-cc.ru/","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"title":"Krab2 CC | Официальный магазин одеял и подушек с доставкой","dom":{"size":26909,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ec9e74c1d4d67e8fdc7850b5bfe50413","sha1":"855c339c40df8f1a92674590eb9a2e8fe40f4bf6","sha256":"bf015cc6ab1cad91bf8c214644b7575d49f06685839cff3b902ac5ef23f6d882","sha512":"84acdd54aeab67190e916c6fa1a93484d62e44b2d00715655fe6447114e21765c67d6430248bd34ba11e8f5d71a6e411dd57eb8048bae94834077cad0d08c070","ssdeep":"384:TUaHiS2A+visLcIP6lVqEyQ0HvSbRQnvmk8qozqe5cm24WGJBCPiotWB:SS2A+yIiSW0HvSbRQnek/AhWSWZKp","tlshash":"8cc2876245fa54ab1102a087de456f0a3db5457f6a2b174236bc2ebd3ff2824c97b30d","dom_hash":"domhashd8ae530a7cde2ebbb7131d0120c645f5","first_seen":"2026-03-28T22:43:53.653775Z","last_seen":"2026-03-28T22:43:53.653775Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krabs2-cc.ru","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"172.67.133.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T22:43:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krabs2-cc.ru","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-03-28T22:43:51.030528Z","last_seen":"2026-03-28T22:43:51.030528Z","alert_count":0,"request_count":3,"received_data":132378,"sent_data":1373,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krabs2-cc.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T22:56:45.279792Z","times_seen":417774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krabs2-cc.ru/","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8d54f2d21201af9629382c249636500","sha1":"87490d852271d317257d74e7880e18c7c26c86ca","sha256":"bcd28091a9a82a98c30e9d2fb324f47aea3ff6582ee9084c6b918128634290f7","sha512":"92c705d124a10355f085e6b51724c83a682c805df6a29f3d715e286f297f57125dd0fe4c76b99f7b2ae6b28d951c64978f452e6526f3e7b576ce90825a05d9fa","ssdeep":"","tlshash":"60e0207378521538d3e112d85fa720056c55343f9049ee25ba0d15765f9d45944a792c","size":359,"data":"","first_seen":"2026-03-28T22:43:53.657015Z","last_seen":"2026-03-28T22:43:53.657015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krabs2-cc.ru/","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6893df89a9a6925850006e2d800cb12","sha1":"d2bec6d1a53c270e420489bcdba4f234cfaad7ac","sha256":"47dc76b3493901217858c1f077e05a7f908afd1ef6e5a044a0b0e160f8b8e5ed","sha512":"33326d6b7ef56d204ae665aab9b9ab49a6d62b27f2702411790a724461d48a03b5ecf5baa96dd200c046432d3c94bd05a8d6188b4d7a204e97a0181fa12e9c20","ssdeep":"96:xPpV+B+IWWsVeLEde1+ljj4ASCNV4n9B5MHltuVSH2L9ix2tWx5:bV24WsVeLqWKUASCNVW5MHuv9ix2tWD","tlshash":"a6c1237651ae54ae0202b45bca096f0538ee41ff3f664b423a7c6de93ff1424867e709","size":5864,"data":"","first_seen":"2026-03-28T22:43:53.657955Z","last_seen":"2026-03-28T22:43:53.657955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krabs2-cc.ru/","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T22:43:29.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krabs2-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 13:30:21 GMT","end":"Sat, 13 Jun 2026 14:27:41 GMT"},"fingerprint":{"sha1":"E8:8D:F0:00:94:1D:30:45:7D:41:DD:51:FE:6B:41:01:08:9A:A6:E4","sha256":"E5:12:DA:4C:0C:E0:A8:4C:27:62:AA:0A:5F:AD:88:63:DC:8B:8A:8E:F6:C7:0B:9D:F4:0B:9C:AC:09:6A:67:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krabs2-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 22:43:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fd7WywrdygCt6WY%2Fee5mC8gfh6PTwztYgwK8e2jS5PbV8ij71KuaWC%2BykMH4xfNbpfYh%2B2m3fAYGZPmLkJPj03e4toMpTe7FVZqu%2FVcAYxPBv2zoCzjTTPJcqtJ9YQI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3a276c2ade8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27865,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"eca3a388c7aa675540266bd9fc94de31","sha1":"6afab95ef54456a0e66b45df7a2981275b22045b","sha256":"7b060291b018397da446b700188bc7325213f2332ff04d63ecc0550036d82c59","sha512":"4d98ed6f929c497840cebf8df23d9759296c579781317e2568c8ebdc746ab03708dd63e99a32d19ba7ea52ed90198acad1b3e88714387f681a50d3f226caa270","ssdeep":"384:E40xbH+fh8BFVP1y28AjTFehh+1FOfROmli24gbePegupqHdsi5ybW:E40xbRBBkAjTFehh+1FuRO4ifVOahN","tlshash":"e2c2676145c968ab1132d087de046f4dfdb941bf6b16174236bd2baf3ff2824c92b609","first_seen":"2026-03-28T22:43:53.655Z","last_seen":"2026-03-28T22:43:53.655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":52,"dns":37,"connect":1,"send":0,"wait":37,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krabs2-cc.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krabs2-cc.ru/","date":"2026-03-28T22:43:29.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krabs2-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 13:30:21 GMT","end":"Sat, 13 Jun 2026 14:27:41 GMT"},"fingerprint":{"sha1":"E8:8D:F0:00:94:1D:30:45:7D:41:DD:51:FE:6B:41:01:08:9A:A6:E4","sha256":"E5:12:DA:4C:0C:E0:A8:4C:27:62:AA:0A:5F:AD:88:63:DC:8B:8A:8E:F6:C7:0B:9D:F4:0B:9C:AC:09:6A:67:A8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: krabs2-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krabs2-cc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 22:43:29 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 28 Mar 2026 23:31:29 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GW5%2B4VMASTkkDeiKtC3X0ahGbmXZAMULrYLVYG7yAK51PMJ7SWlnAjgiUh8zJgpnlOvrsDsN70WUG7OCT6WSY0%2Bvg%2Fj9xowgeJWbecGsmGDbeFd7d4v2RNHiWPIQ3ao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e3a276dbbbaa0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T22:56:45.279792Z","times_seen":417774,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krabs2-cc.ru/favicon.ico","fqdn":"krabs2-cc.ru","domain":"krabs2-cc.ru","tld":"ru"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krabs2-cc.ru/","date":"2026-03-28T22:43:29.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krabs2-cc.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 13:30:21 GMT","end":"Sat, 13 Jun 2026 14:27:41 GMT"},"fingerprint":{"sha1":"E8:8D:F0:00:94:1D:30:45:7D:41:DD:51:FE:6B:41:01:08:9A:A6:E4","sha256":"E5:12:DA:4C:0C:E0:A8:4C:27:62:AA:0A:5F:AD:88:63:DC:8B:8A:8E:F6:C7:0B:9D:F4:0B:9C:AC:09:6A:67:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krabs2-cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krabs2-cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 22:43:29 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 10:09:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yrq8lGKMMbU4zEAK%2FlywOdmpu8dC9meopxx5k0ZvDw4ubLzZvYCVDV9rlQGTrX4bfD%2F6KXQVFu3zTBO5wKYPPYD0zVwANLATeTUYrr5CplTLGWiy6kiOxTkJn1ZPmzQ%3D\"}]}\r\netag: W/\"69c505bc-18c10\"\r\ncontent-encoding: br\r\ncf-ray: 9e3a276e1c70a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}