{"report_id":"b43c92b3-252e-42e4-8cce-99434a4a92ec","version":6,"status":"done","tags":[],"date":"2026-03-28T04:52:13Z","url":{"schema":"https","addr":"slon--2--t--o.ru","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon--2--t--o.ru/","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"title":"Slon2 to — поставки оборудования для технического обслуживания инженерных систем в Москве","dom":{"size":16603,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (312)","md5":"ba237faafba19d143ff5d11118a3666c","sha1":"259812f8e384f871ecba643db4eacdd3d46646c0","sha256":"b3b0b7458edd634770fe53f58c9491463697e81946a5b3be234fa4baa8b83b9d","sha512":"ef8b71d03ec4318954f90627f5c3b3950cbfd9737598fe9477480c4e25d2f197ec41a5a8e018ab9732c9cf819ec7d422660a00f1ef7f2f86a84fd66a1110ce33","ssdeep":"192:Bydriq3bQLzkHr8uanREYf6b2DyMuha18LOV6rj4+psDvsH4qZRJ9yyXGXwsTKFP:Mn1rhq6b2T3/+6MZRJ9qwzFcUE1iHdiC","tlshash":"4672ed7044f928d91201a007dd506f0d2dba81bf7b669761326c2dae3fe3a90ce6761e","dom_hash":"domhash1a8c3ca2b9999dba4090846e70a32297","first_seen":"2026-03-28T04:52:16.668323Z","last_seen":"2026-03-28T04:52:16.668323Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon--2--t--o.ru","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T04:52:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon--2--t--o.ru","ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-03-28T04:52:13.447436Z","last_seen":"2026-03-28T04:52:13.447437Z","alert_count":0,"request_count":8,"received_data":186426,"sent_data":4233,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon--2--t--o.ru/","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a36de2192ced80e28061a0fd7d08b2d4","sha1":"c7e9082bea80ee05bdb1b83287d9382cb0dc3f8e","sha256":"ec258f373bf6da70a0df403e5dcf5101c4d9f10a55f05400e7397f0762a2c2ce","sha512":"cc184ecb9eb8179d8420beb17b2d798f206e5103757d9853859767de236638526223be19c7469c988f639c3785daaeb375b089850a2e59030c5f52045c79ca55","ssdeep":"192:yq3AQLZkHr8uanREYf6b2DyMuha18LOV6rj4+psDvsH4qZRJ9yyXGXwsTKFcUEHb:7Arhq6b2T3/+6MZRJ9qwzFcUE1iHdi7","tlshash":"dc62ec7044f928d91101a007dd546f0d3dba80bf7b669761326c2dae7fe3a90ce6b61e","size":15385,"data":"","first_seen":"2026-03-28T04:52:16.681996Z","last_seen":"2026-03-28T04:52:16.681996Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/script.js?v=1774673512579","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1949b30ac081b01017f2355c18f78e8","sha1":"40bbd530a1b882ce149e691adf5f350467016ad8","sha256":"d22ecdbc5aaed292e3208883190bf541105c439165930649e8c584ff6d836119","sha512":"e98ac7faa46b821daca95322f2cf5544029cd534b36694756b97edbb0b05c72bffa5c524f30689135bbbde72398e21006d189932f36a371c0cadd8923531fb52","ssdeep":"","tlshash":"d8e02b7561a298b00ab771af63d71284b47a009f780d90c1781c4d580f14ad543b3f59","size":402,"data":"","first_seen":"2026-03-16T22:20:51.416703Z","last_seen":"2026-03-28T22:34:37.863223Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon--2--t--o.ru/","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:51:51.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://slon--2--t--o.ru/__challenge?r=/\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":17171,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":89,"dns":22,"connect":25,"send":0,"wait":24,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:51:52.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":17171,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (312), with CRLF, LF line terminators","md5":"7fbcb5094523316ab7e1a4d3b9c98d92","sha1":"5f9129745e75c602715ab1f34ad7729ed9dcf7b0","sha256":"4b35879ab58c261cd29afc2e48ddf76a1359546ceb66f1103070c9aa1e084d68","sha512":"7700edc40f6a69f738974e3a5c8c923002783a774c2372e1a59edd8436503fb06da915ef35f714311991117efe1c47edab5dc5153df79b299f563c80acbafd7e","ssdeep":"384:ODr0L6e0wXJPXZz+u9G4I1y9yMGEtikni1:ODr0J0wxXZz+u9Gwc31","tlshash":"6e72bd7044e568d91121a006ce146f0cfd7681bf7b66976132ac2daf3ff3a50ca67a1e","first_seen":"2026-03-28T04:52:16.675434Z","last_seen":"2026-03-28T04:52:16.675434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/images/2.png","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon--2--t--o.ru/","date":"2026-03-28T04:51:52.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /images/2.png HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--2--t--o.ru/\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 18004\r\nlast-modified: Thu, 19 Mar 2026 12:43:05 GMT\r\netag: \"69bbef59-4654\"\r\nexpires: Sun, 29 Mar 2026 04:51:39 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":18004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 120, 8-bit grayscale, non-interlaced","md5":"d45f6fd593c1313b5150a49314983521","sha1":"b85eeba8b012cca6111872b955030dd7f562ffa1","sha256":"854e0eb687a3472c7774c5f63b9604323b2eb40ccd2e54ad3eb95669fb08e9e0","sha512":"be341ce2fa4d08c0c39ffdd562632736e3b8f5faea0ffd17379e715f406acfed4fcf454b14652aa07a27daedc048ac911b5e688cce67f25a44e0fdae81eab00c","ssdeep":"384:HKxPbN13gKOuzTjzyo1+TuQ5Su42kUe1muE+:H2PQUyo1WpAA6","tlshash":"8f82d0f8a87c5de3cc31161a8b1c64be814616ead3ee9288435dd7580e7613ce5e6f80","first_seen":"2025-12-31T18:53:56.783562Z","last_seen":"2026-04-13T10:44:14.169895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/favicon.ico","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon--2--t--o.ru/","date":"2026-03-28T04:51:52.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--2--t--o.ru/\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 101392\r\nlast-modified: Thu, 19 Mar 2026 12:43:05 GMT\r\netag: \"69bbef59-18c10\"\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/__challenge?r=/","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:51:52.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /__challenge?r=/ HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://slon--2--t--o.ru/\r\nset-cookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64; Max-Age=900; Path=/; Domain=.slon--2--t--o.ru; Secure; HttpOnly; SameSite=Lax\r\ncache-control: no-store, no-store\r\nx-rate-limit: challenge\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":17171,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/css2?family=Roboto\u0026display=swap","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon--2--t--o.ru/","date":"2026-03-28T04:51:52.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /css2?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--2--t--o.ru/\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-14T14:41:10.461672Z","times_seen":550678,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/style.css","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon--2--t--o.ru/","date":"2026-03-28T04:51:52.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--2--t--o.ru/\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2026 12:43:04 GMT\r\netag: W/\"69bbef58-310d\"\r\nexpires: Sun, 29 Mar 2026 04:51:39 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":12557,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a3ada102f63d9538e588ccf599774831","sha1":"53e759ede3218fb614ea1c58331b4a12dca697ad","sha256":"ff9988b42ff2ce1d2ee6b20f415f87ff7ea83b3cb5f927b93c0882509e322c03","sha512":"d9ab80101185fdf59832fb1f2b63704594c9ef814c6f5f7d5b6e964f55fe7ab0c826699d8d221a4da917a34e9622c9968eefbcf0785d19ca924a092bf53b221a","ssdeep":"192:7UNAsvsQc0pqijkZBu327pDPIhkCnlfNwOzYs165lNoNxo4f/faGUpu1LT:IN7l04hk2ENofBHNd","tlshash":"e2421fd72ba81504791ad4b8bd92db5673acd443c10fcdb87bf4206cadca3d549a2b8c","first_seen":"2025-12-31T18:53:56.781083Z","last_seen":"2026-04-13T10:44:14.168697Z","times_seen":34,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon--2--t--o.ru/script.js?v=1774673512579","fqdn":"slon--2--t--o.ru","domain":"slon--2--t--o.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon--2--t--o.ru/","date":"2026-03-28T04:51:52.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon--2--t--o.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 13:57:10 GMT","end":"Wed, 17 Jun 2026 13:57:09 GMT"},"fingerprint":{"sha1":"22:D6:5F:8D:C9:94:ED:25:47:B6:13:16:07:42:5E:A8:3E:60:BE:23","sha256":"56:76:9D:F9:E3:4A:2D:1E:2E:D9:72:51:95:71:6B:FF:81:9A:8B:C4:BD:4D:3D:E7:97:8C:20:EB:81:F3:32:D8"}}},"request":{"raw":"GET /script.js?v=1774673512579 HTTP/1.1\r\nHost: slon--2--t--o.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon--2--t--o.ru/\r\nCookie: edge_gate=1774674412.be87fd276d083ff363bcd3ad6794f5fb1010ae7b514942566d96f0bf84d43b64\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Sat, 28 Mar 2026 04:51:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Mar 2026 12:43:04 GMT\r\netag: W/\"69bbef58-192\"\r\nexpires: Sun, 29 Mar 2026 04:51:39 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 1\r\nx-edge-protection: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":402,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d1949b30ac081b01017f2355c18f78e8","sha1":"40bbd530a1b882ce149e691adf5f350467016ad8","sha256":"d22ecdbc5aaed292e3208883190bf541105c439165930649e8c584ff6d836119","sha512":"e98ac7faa46b821daca95322f2cf5544029cd534b36694756b97edbb0b05c72bffa5c524f30689135bbbde72398e21006d189932f36a371c0cadd8923531fb52","ssdeep":"","tlshash":"d8e02b7561a298b00ab771af63d71284b47a009f780d90c1781c4d580f14ad543b3f59","first_seen":"2026-03-16T22:20:51.416703Z","last_seen":"2026-03-28T22:34:37.863223Z","times_seen":20,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}