{"report_id":"805b6f31-f396-4260-a89e-03e1e0840685","version":6,"status":"done","tags":[],"date":"2026-03-05T18:33:34Z","url":{"schema":"http","addr":"lis--skins.ru","fqdn":"lis--skins.ru","domain":"lis--skins.ru","tld":"ru"},"ip":{"addr":"37.140.192.156","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"lis--skins.ru/","fqdn":"lis--skins.ru","domain":"lis--skins.ru","tld":"ru"},"title":"lis--skins.ru/","dom":{"size":65,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"750fb1042630e31d08a7b911ef7e3032","sha1":"0ec7cb2a5fbb362a1eed446a714f7bfbd282e436","sha256":"c9b9a86fee3e597b1f5ea99a1607fc07ada2c7c5a7d6abdfc81e820de4fa6637","sha512":"875587e13852f402bd47a75276ee763b3f9f582fbb046120600069329398102166195188e31acff778f09487c334bb035b0b7ea78db15463bd88fc86b665116e","ssdeep":"","tlshash":"5aa022fc888280000c3032800cc2320a3ab8038820008a000ec02030a000330cc03088","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lis--skins.ru","fqdn":"lis--skins.ru","domain":"lis--skins.ru","tld":"ru"},"ip":{"addr":"37.140.192.156","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T18:33:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"lis--skins.ru","ip":{"addr":"37.140.192.156","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-03-05T18:33:34.857056Z","last_seen":"2026-03-05T18:33:34.857056Z","alert_count":0,"request_count":2,"received_data":769865,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lis--skins.ru/","fqdn":"lis--skins.ru","domain":"lis--skins.ru","tld":"ru"},"ip":{"addr":"37.140.192.156","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T18:33:10.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lis--skins.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 16:25:40 GMT","end":"Sun, 24 May 2026 16:25:39 GMT"},"fingerprint":{"sha1":"BF:2B:3B:5D:AE:B1:82:80:E7:8C:D9:B4:92:99:3B:49:D8:53:A6:27","sha256":"2C:E0:12:56:F8:DD:5C:30:83:FF:3E:BA:8A:7D:FB:58:BA:F5:56:64:97:B1:B0:1B:8B:56:26:03:00:BD:1A:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lis--skins.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 05 Mar 2026 18:33:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 26\r\nx-powered-by: PHP/8.3.27\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5e7002807870b107f4892a1152944435","sha1":"0453cf8da1922b5a967c11d9bed518f8f6e68dd4","sha256":"28a8c3eb2936412f8c6a260742cbbfbfd8655b96f46f9ee59ff06b703564f38e","sha512":"779bf93c0455cc0590da73b2dcf88fb51812416b52220e5dc8d9f345b0a72068dc44ba443b1575bde1ef3a960d5d6a9f4a71a57a681dc1132f276c7f7510638d","ssdeep":"","tlshash":"ed8000080e82e2a0008a82222eaab80832b02382828080a08ec0802030002b0ca03020","first_seen":"2023-10-17T21:11:45Z","last_seen":"2026-07-18T02:25:11.005086Z","times_seen":49,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":144,"dns":66,"connect":34,"send":0,"wait":190,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lis--skins.ru/favicon.ico","fqdn":"lis--skins.ru","domain":"lis--skins.ru","tld":"ru"},"ip":{"addr":"37.140.192.156","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis--skins.ru/","date":"2026-03-05T18:33:10.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lis--skins.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 16:25:40 GMT","end":"Sun, 24 May 2026 16:25:39 GMT"},"fingerprint":{"sha1":"BF:2B:3B:5D:AE:B1:82:80:E7:8C:D9:B4:92:99:3B:49:D8:53:A6:27","sha256":"2C:E0:12:56:F8:DD:5C:30:83:FF:3E:BA:8A:7D:FB:58:BA:F5:56:64:97:B1:B0:1B:8B:56:26:03:00:BD:1A:64"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lis--skins.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis--skins.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 05 Mar 2026 18:33:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 21 Jul 2025 23:53:32 GMT\r\netag: W/\"bbd7c-63a792ee530e2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":769404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"dfbd4453b92908456fbea41dc243f598","sha1":"31e137d1efe465fe78407233f95fd91a1f377d77","sha256":"39b75d2e76bd56e06569a58d93b7ed29649b5f0f49a6b4cc3fbb72de77490f32","sha512":"81557c79d08db2738da8307588387828bda0aad26ceb190acbe8436785b02edcd11562ded04c1599eeea144c7346c9901005cfe16ba35beea5f370278809f825","ssdeep":"6144:A0T9gq5TgX8gscru33oyBsQ70t6o1ystAUEPusTCNwPdvgJ:93oyBsQ70t6o1yoArdeJ","tlshash":"52f409c8abf02c5e921b86316c3f89c6f30a76d4b6fc4407694df791e25e116f226678","first_seen":"2025-10-20T23:19:08.399499Z","last_seen":"2026-05-02T13:34:49.297785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}