{"report_id":"b432f74f-b047-48fc-8360-c98b62a51155","version":6,"status":"done","tags":[],"date":"2026-01-13T10:26:37Z","url":{"schema":"https","addr":"krab1c.ru","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"104.21.8.198","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krab1c.ru/","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"title":"Krab1 cc — ароматы для дома и машины: диффузоры, спреи, автопарфюм","dom":{"size":28262,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"14c0f13c8d7dae7fbb10acff810ba4a8","sha1":"eaaaf780212490a932d27fdbd5e2c0bd8c529001","sha256":"993747bd35136c6d7d742f9f99db5edb64f27fbba4c500cd1d0142c35d839c83","sha512":"9eb2f45033a1fe40c89d696dd1e04e42123471a95f7e762cd9831cb6057946f8550f91a5580e9945f0b6504427e2ae20d9df769235e227c0727f61599c4b6745","ssdeep":"384:TS5dOov9rMa7Qcs4RrjFa9HkFTW/LGARn6jtZEjX79d:n+rVnFekFKBd6jtZ87n","tlshash":"88c2876281f6145b1003a046de545b0e3db7847bee2b671273bc2eee6fe3599c937209","dom_hash":"domhash6713731456f8c7821975315c176a3443","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"krab1c.ru","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"104.21.8.198","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T10:26:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"krab1c.ru","ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":133926,"sent_data":1358,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krab1c.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T04:26:03.273823Z","times_seen":404047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1c.ru/","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e916289434328c836270e617a050a5f2","sha1":"6631fd1af5c5ac9db7daa6b393c31d9a404ca9ba","sha256":"012536e11d5b75dc3650e9daf43a09e0b6e899fea33f52e305b47fa104dfe5a4","sha512":"1ceedc03f25bbb818651448e5a8a91787a275988dd0d3d2415f220a1d1ed26ecd3103bb564c82c9a5466f9a3879d24d8abdcbd55dc3eead199b614da44d142db","ssdeep":"","tlshash":"62e0c077b8421134d7b312886bb721143815343ba086af15f10c64725f9a42804a781c","size":366,"data":"","first_seen":"2026-01-13T10:26:58.497298Z","last_seen":"2026-01-13T10:26:58.497298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1c.ru/","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0bc35cc5a5e0caf7f9cabe922f6f646","sha1":"86c82e942ca9c144bf07fddb53743c0bb7a7a953","sha256":"4601f1ec56d53e1fa018bc00d30709a118be09fc4d1775dc158fe3adc0748071","sha512":"999ebc22208d0b37e9b56194ed7ac0ea38fd7d627dd48cd0e2079077acf06772a71313df98599ce0bafb228d82e6a7237fe180219e839f1f06084517ca8ac2a6","ssdeep":"","tlshash":"eba024133f4414111d7f3057411053cd343040d13cc1d0373d1c01004c40741103c0c0","size":75,"data":"","first_seen":"2025-02-19T12:31:37.28288Z","last_seen":"2026-06-04T11:50:42.308824Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krab1c.ru/","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T10:26:16.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1c.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 18:26:17 GMT","end":"Mon, 16 Mar 2026 19:23:50 GMT"},"fingerprint":{"sha1":"00:B0:AD:4A:B6:42:3F:CA:F7:08:F4:F9:DA:E4:32:A3:A4:40:41:67","sha256":"BC:B8:6D:34:21:D2:30:8C:CF:E4:65:9B:A8:12:05:7C:FC:50:BC:DB:8A:45:16:1C:AC:A3:1A:C0:D9:CB:AF:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krab1c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 10:26:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-fastcgi-cache: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ixxa2UBPthgLQAnz%2B4IyG%2F1ELlj6FR%2Blq885fHXvnEB6Lv01C7pybzF9ybYWtayqdzmieUUCSiBYETf2CuMTlF3GxePZeyM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bd431c39f11b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29461,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"13a26a9f52785a8e89ed2a4737656323","sha1":"37cde39a4766574fa0b444583f90a52aaf2cc0b6","sha256":"22e6e0e1a2034124ff5b3a6946c69b9deee2734b2db0b5e2a6eb3ac161725a37","sha512":"d80188568d4bae75de168df635c0b8c3f267a1e629240593c73cc6f079751dae6e0f892c95c4ea83cfa4350f4425e41e5e324e1fb6f773aab86605db5492c061","ssdeep":"384:rENNA6zqvNc08MpqsbXf7835xt2I8h+LMP:rEN/zUNcHEjf783y0Lq","tlshash":"31d2546291c5285b10339046df545b0efeb6817bab27271272bc2bef6ff3558ca23605","first_seen":"2026-01-13T10:26:58.492599Z","last_seen":"2026-01-13T10:26:58.492599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":52,"dns":38,"connect":1,"send":0,"wait":61,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1c.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krab1c.ru/","date":"2026-01-13T10:26:16.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1c.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 18:26:17 GMT","end":"Mon, 16 Mar 2026 19:23:50 GMT"},"fingerprint":{"sha1":"00:B0:AD:4A:B6:42:3F:CA:F7:08:F4:F9:DA:E4:32:A3:A4:40:41:67","sha256":"BC:B8:6D:34:21:D2:30:8C:CF:E4:65:9B:A8:12:05:7C:FC:50:BC:DB:8A:45:16:1C:AC:A3:1A:C0:D9:CB:AF:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: krab1c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1c.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 13 Jan 2026 11:14:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2ut20aB6uvg%2Fz%2FVi9qGQjXJKSEAyy96QrPDoNisBRr1YV%2Fc8C8twVNzYrBgLNzgASQwF3cS0CJCrMS5OanpqYV1ShmoIiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 10:26:16 GMT\r\ncf-ray: 9bd431c5ad9256b7-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T04:26:03.273823Z","times_seen":404047,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krab1c.ru/favicon.ico","fqdn":"krab1c.ru","domain":"krab1c.ru","tld":"ru"},"ip":{"addr":"172.67.130.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krab1c.ru/","date":"2026-01-13T10:26:16.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krab1c.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 18:26:17 GMT","end":"Mon, 16 Mar 2026 19:23:50 GMT"},"fingerprint":{"sha1":"00:B0:AD:4A:B6:42:3F:CA:F7:08:F4:F9:DA:E4:32:A3:A4:40:41:67","sha256":"BC:B8:6D:34:21:D2:30:8C:CF:E4:65:9B:A8:12:05:7C:FC:50:BC:DB:8A:45:16:1C:AC:A3:1A:C0:D9:CB:AF:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krab1c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krab1c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 10:26:16 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Wed, 17 Dec 2025 02:22:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694213c9-18c10\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hkKeDH4ZowKq73Cx63R%2BS037GuRzWSqrOB4Kli%2FUvbRdwnd9ZUbbIavHWxm%2FBEBlTkPaAF0f33BYRTsS5AdkEmPENMgMDV0%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9bd431c61d9656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}