{"report_id":"8e0e6c15-c121-4441-be43-ba817e68781e","version":6,"status":"done","tags":[],"date":"2026-05-12T11:37:31Z","url":{"schema":"https","addr":"slon----6at.ru","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon----6at.ru/","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"title":"Slon6 at — авторские флорариумы и террариумы под стеклом в Москве | Slon6.at","dom":{"size":40860,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (373)","md5":"3aac760d5adfe8c1ddff5d64357a8afe","sha1":"fb16d8d36528e5ee92dfa4079f9da2c1c7d65488","sha256":"22b9659de6183e1425fb7a3c6a8a19337afdda12d252fed76412a36be29b00f8","sha512":"91ce3de32d22353e2bba4d653298c8b4166f15e5791f8e363eb437b70a805e141a40e030c71e629f2142e59eb55b3b967a90b858e7dcd2e2961a4a7bb6384524","ssdeep":"768:K5T9tpQOIS5aVIIZkE45Lcb8OCOhZ5XEIAaiqOgUz:UT9nrYVIIZkE45Lcb8OCOhfXEIf4gUz","tlshash":"c803b760a1e954fa2117f083e8546b0e3ce5d4bfec5b175131ac2aad2fe3965ce1630e","dom_hash":"domhashaec1c3cdb35e87391348cde833108ed2","first_seen":"2026-05-12T11:37:35.264996Z","last_seen":"2026-05-12T11:37:35.264996Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon----6at.ru","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T11:37:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon----6at.ru","ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"domain_registered":"2026-04-30","domain_rank":0,"first_seen":"2026-05-12T11:37:31.831129Z","last_seen":"2026-05-12T11:37:31.831129Z","alert_count":0,"request_count":2,"received_data":45958,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon----6at.ru/","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3363fc91bd0178ac68d52c0dcd741e7","sha1":"75e960b4c7f0a8c9a3214f1e14e213e8d320567c","sha256":"5db1e8498f7a46af2031490624aaf736d29fd6bf6e19615eb70117e2d8c10af9","sha512":"81d47dfb180ff7f010cdcce470c279fe8e88705c6d1ab2c1567e7d0141ca36e09b754b8f20cee06248ff80a5d03a69e2cbd1519b64d28827d95e6c5f3d07b2f9","ssdeep":"","tlshash":"a7f041e73cca4138c7b312693b7392583039293f744ebc62b80c28522f80e6514ab90c","size":621,"data":"","first_seen":"2026-05-12T11:37:35.2722Z","last_seen":"2026-05-12T11:37:35.2722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon----6at.ru/","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf58efcb488ea144b6a49f1fe345d9fe","sha1":"6f57ed4835f756082541d037c5f2260daad8e28a","sha256":"0c1b9f371e542a24805dada71deb81bf15bea74e37e120c063dc22d9607bfeb3","sha512":"467996f84f748d5a7f3891a8b704cbfd4bbc9f65c9fdb7a7f28796d2ddddabffb9bb542ebce3eae9ef233467a2c66803acf958ba81ad5411ecf5f5650cf9de82","ssdeep":"","tlshash":"5431008ebea534bf08bb2773939f2389393a20861c85501529f498c80fe8d865953ddb","size":1520,"data":"","first_seen":"2026-05-12T11:37:35.273832Z","last_seen":"2026-05-12T11:37:35.273832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon----6at.ru/","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T11:37:09.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon----6at.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 00:52:44 GMT","end":"Thu, 30 Jul 2026 00:52:43 GMT"},"fingerprint":{"sha1":"D7:FA:FA:86:A7:7E:2F:CA:6B:E5:8D:90:A5:9F:B6:A1:E7:82:F6:44","sha256":"C8:FD:46:D3:E5:83:D0:18:0C:07:9D:09:69:6C:16:02:C5:57:B1:98:F7:6E:E1:93:16:22:D8:16:13:24:7B:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon----6at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Tue, 12 May 2026 11:37:10 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 30 Apr 2026 22:55:39 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69f3ddeb-a0db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41179,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (373)","md5":"bb9411fc53034efe7ce34eae04e97d2f","sha1":"c8823753bf1f62f5b88579b9426f3fb40a9b85fd","sha256":"b8c35bb1d74bdff6c46f7b0b13b024229bca8938a7845ed6b86fd49d3d924122","sha512":"23d47a0e64c4d50175fd97301989e0f8f6642047ab5ea89153237d6f3b453ad60568a1e4a222582ed598a7eb2ef217ddaf6777a5c54e48d4e95da192fd5e0676","ssdeep":"768:FxT9tpQOIS5aVIIYkE45Lcb8OCOhZ5XEIAaiqxgUX:rT9nrYVIIYkE45Lcb8OCOhfXEIffgUX","tlshash":"5603b660a1e954fa2117f083e8546b0e3cd5d4bfec5b175131ac2aad2fe3965ce2630e","first_seen":"2026-05-12T11:37:35.269506Z","last_seen":"2026-05-12T11:37:35.269506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":120,"dns":48,"connect":27,"send":0,"wait":49,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon----6at.ru/favicon.ico","fqdn":"slon----6at.ru","domain":"slon----6at.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon----6at.ru/","date":"2026-05-12T11:37:10.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon----6at.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 00:52:44 GMT","end":"Thu, 30 Jul 2026 00:52:43 GMT"},"fingerprint":{"sha1":"D7:FA:FA:86:A7:7E:2F:CA:6B:E5:8D:90:A5:9F:B6:A1:E7:82:F6:44","sha256":"C8:FD:46:D3:E5:83:D0:18:0C:07:9D:09:69:6C:16:02:C5:57:B1:98:F7:6E:E1:93:16:22:D8:16:13:24:7B:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon----6at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon----6at.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Tue, 12 May 2026 11:37:10 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Thu, 30 Apr 2026 22:55:39 GMT\r\nConnection: keep-alive\r\nETag: \"69f3ddeb-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-08-10T14:38:22.231923Z","times_seen":48,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}