{"report_id":"81e09cf8-fc3d-4d36-bfda-ab35f3147b3b","version":6,"status":"done","tags":[],"date":"2026-05-18T11:38:01Z","url":{"schema":"https","addr":"slon--------6cc.ru","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon--------6cc.ru/","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"title":"Slon6 — аквариумы на заказ в Москве, морская и пресноводная аквариумистика | Slon6.cc","dom":{"size":43960,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0fb3d4f0fcb8fc1b57f3ba56fe89cec0","sha1":"eb05c65e0d3746052576cbf6d6c58b6902c8dfce","sha256":"32fc43874eee5ffe23cd3d7ffec0c4edf31e716a355ffef3a77227648b150cf2","sha512":"db53577d3dff50110b7f8ff44e90c3d2b34fb9dbda5e13b8864872f47caf9a330feb1b7216123d76aa8c4ec39a59d904f1c33f2926f76616f8cb13e5c2a96a66","ssdeep":"768:4T9v+F81QePrxDx8WU8qHOIIxGGdx3FS9lps++O9PReEtsyyT183Rlz:4T9K81QePrxDx8juIIFdx3FS9Hs++O91","tlshash":"9d13b971a4a414a52117e083e9507b4e3df9c4bfaa5b1b4531bc2d9e3fe38548e2b34e","dom_hash":"domhashec7d710d4a7ff81130bffcb9f06bf49c","first_seen":"2026-05-18T11:38:05.970118Z","last_seen":"2026-05-18T11:38:05.970118Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon--------6cc.ru","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T11:38:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon--------6cc.ru","ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-05-18T11:38:01.902522Z","last_seen":"2026-05-18T11:38:01.902522Z","alert_count":0,"request_count":2,"received_data":49369,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon--------6cc.ru/","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f0cc7aafd193bf43a608078bbdbbd7","sha1":"2ed0a0e7ff13a15d192c5d71703a90fc10e4d3e7","sha256":"eff7a29079f5133de9d81034312e59c29d430f053ebba72cc7088130af579427","sha512":"37ad9a4a33362ae9b9ba05735213b2830487181f0d125e7ce848058f6e360f7b2fabf92c326b249f11ee27d827ea1833c38a70ae703632a55a9695fe46a64286","ssdeep":"","tlshash":"27f041e73cc98038c3b712653b739249303a253f340eec52b80d28563f80e6514a7a1c","size":621,"data":"","first_seen":"2026-05-18T11:38:05.974006Z","last_seen":"2026-05-18T11:38:05.974006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--------6cc.ru/","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"573ff7bacf5538538b1ce2476983402e","sha1":"2b92ed1d52b7073cd4bf9a51b9a086634f9229cc","sha256":"7147268d64cad4f4f4f6c0079313fb7214b47c37775ecc2e61c457f771c76902","sha512":"90fd996c47610baa65292db14cdb0a8b11d41df9df02dee53a8f94bcbf437df9a26a32199d4bb626690eea2add392503bbdd42bd53f96a14c87634929275fad6","ssdeep":"","tlshash":"0251f19ebe6164775c7b12b7c3df17843c6620466802c05527b5d8c90fe8d862da39ee","size":2635,"data":"","first_seen":"2026-05-18T11:38:05.975226Z","last_seen":"2026-05-18T11:38:05.975226Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon--------6cc.ru/","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T11:37:40.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--------6cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 00:29:44 GMT","end":"Fri, 24 Jul 2026 00:29:43 GMT"},"fingerprint":{"sha1":"95:90:F6:E1:C4:3C:C8:10:B5:31:05:98:B8:D1:E7:62:58:FD:C3:11","sha256":"80:A4:ED:E9:80:81:6A:A2:0A:C6:0C:4C:6A:5D:E3:DD:8B:0F:78:2C:85:6F:20:35:52:21:E0:8F:38:E4:CA:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon--------6cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 May 2026 11:37:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 25 Apr 2026 00:45:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ec0eaa-ae2e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44590,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"074b1f6202ad836aaaa89e3a1a21e2df","sha1":"ed55ecb046ba81cb630a37cc0965ae1ee49a9875","sha256":"6d8a38bf1d179d7546e69a09dd411d30ef69142026050a7b057ed981981c71c3","sha512":"ec644e66854f5d4a55741e6a717910035e300268224cfab3e9199bf394cea8e9351f680c2706dad33f9d8e52eb9780cab89bf71565f8c7b1a3402de95b2685d6","ssdeep":"768:B+9HYdp1QEO6i64LKn3fgOII0d3wx3DQkupscQ1pQPRe6HB0yTh8VZ8c:B+94p1QEO6i64LwdIIowx3DQksscQ1mG","tlshash":"f9138761a5c518a52137e083e9506b4dfca981bfab171b5531bc2a9f3ff34148e2b34e","first_seen":"2026-05-18T11:38:05.971887Z","last_seen":"2026-05-18T11:38:05.971887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":79,"dns":23,"connect":24,"send":0,"wait":51,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--------6cc.ru/favicon.ico","fqdn":"slon--------6cc.ru","domain":"slon--------6cc.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon--------6cc.ru/","date":"2026-05-18T11:37:40.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--------6cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 00:29:44 GMT","end":"Fri, 24 Jul 2026 00:29:43 GMT"},"fingerprint":{"sha1":"95:90:F6:E1:C4:3C:C8:10:B5:31:05:98:B8:D1:E7:62:58:FD:C3:11","sha256":"80:A4:ED:E9:80:81:6A:A2:0A:C6:0C:4C:6A:5D:E3:DD:8B:0F:78:2C:85:6F:20:35:52:21:E0:8F:38:E4:CA:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon--------6cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--------6cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 May 2026 11:37:40 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 25 Apr 2026 00:45:30 GMT\r\nConnection: keep-alive\r\nETag: \"69ec0eaa-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-08-10T14:38:22.231923Z","times_seen":48,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}