{"report_id":"c28bc80d-831f-47e9-8960-3384ca6fff9f","version":6,"status":"done","tags":[],"date":"2026-03-02T20:28:43Z","url":{"schema":"https","addr":"slon-1-----cc.ru","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"slon-1-----cc.ru/","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"title":"slon1.cc — эталоны и тест‑образцы для рентген‑контроля (НК) в России, офис в Москве","dom":{"size":14455,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (316)","md5":"6083cbdd8c115ad033acb23c6ea72e03","sha1":"046343fd47a403605cd13d35d3a0c5190fd36ad1","sha256":"406672ab18ddfd579ded4b962292e83f9069b2668f5855244de1d548e97bbba4","sha512":"9720c4c9932739ede2b89c73e7a20372d3002b105ce73dd5f5e3876176f1674a8e0a6b5d040eb9893295e7306dcf7d4e23707cf371c8299a1f5a24ce3c9c3f5b","ssdeep":"192:H6QIJ5Z9Hpl9g9WJfc3pVqGEg3gYvpqinKOovu4wQL2ya+OqOVRu6JkIdVOLbhsh:aXDJl9pE3NEgHwOxkOqKVOLbmh","tlshash":"0a52ed616599289b1101b416ed00bf0a3daa44bfab6a1773345d3d7f7fe6018c63f32a","dom_hash":"domhash2d55624130014559d643476a75e10531","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon-1-----cc.ru","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T20:28:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon-1-----cc.ru","ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-03-02T20:28:43.575464Z","last_seen":"2026-03-02T20:28:43.575464Z","alert_count":0,"request_count":2,"received_data":19865,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon-1-----cc.ru/","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"35444f81077e208d750b2760bccf05b7","sha1":"7f0d0ea4042dad2560fb52ff54bedab855d955e5","sha256":"3a37a0c96f840d46e2c29bea272c25e528f1669b2d501c6e6c013c937994f0f3","sha512":"6861851142577923a382c52cd1e29d1bfae913226564e96181c33c455db58833a91526e8b6b05dc0bb55076dca747847016684f5fe42a283e185b108b23c2cb6","ssdeep":"","tlshash":"67f00cb73c890038c3a302653bb3a2593039293f784eac62f80d18623f80e6558a790c","size":621,"data":"","first_seen":"2026-03-02T20:28:47.977863Z","last_seen":"2026-03-02T20:28:47.977863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon-1-----cc.ru/","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:28:21.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon-1-----cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:55:51 GMT","end":"Fri, 29 May 2026 22:55:50 GMT"},"fingerprint":{"sha1":"5B:CF:02:1C:F5:08:D4:8A:BB:6B:1B:4B:34:F1:0F:A5:BE:AE:38:15","sha256":"37:F7:AD:BA:91:D2:A0:DD:7A:38:18:3A:A7:FB:30:C2:CE:B1:B4:75:CF:7B:7E:53:E0:6F:F9:8D:0B:71:D2:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon-1-----cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:28:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 28 Feb 2026 21:09:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a35972-3afc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15100,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators","md5":"06fca0406a02e8a10660608166b89001","sha1":"e919c8f4b0948609a55af0c3314185ee4bb2b688","sha256":"68baf05a3dcc04ae25db6ff450304b476cab08ac6cf668a5f88f67f97923ecfe","sha512":"b17093da0f7aff4c966049ca727d36fcba9ff701be972eddf3e4b39e6f99b1077b95798bf4b5b0691bd46a172b981d030970372f00b9dadca6ab64e20f5afd4f","ssdeep":"192:+JQIJex8eg9q79WRhczgplpErPgT7WpDnKO2/hNw1LCN1aROqp7mC6Nkpa7OHbKl:AJeg9PCzMErrIOzSiOqa7OHbvc","tlshash":"4a62de6155ca289b1121b01aed00bb09bdaa44bf6b661773346d3d7f3ff6114c62f32a","first_seen":"2026-03-02T20:28:47.972978Z","last_seen":"2026-03-02T20:28:47.972978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":144,"dns":50,"connect":44,"send":0,"wait":45,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon-1-----cc.ru/favicon.ico","fqdn":"slon-1-----cc.ru","domain":"slon-1-----cc.ru","tld":"ru"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon-1-----cc.ru/","date":"2026-03-02T20:28:22.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon-1-----cc.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 22:55:51 GMT","end":"Fri, 29 May 2026 22:55:50 GMT"},"fingerprint":{"sha1":"5B:CF:02:1C:F5:08:D4:8A:BB:6B:1B:4B:34:F1:0F:A5:BE:AE:38:15","sha256":"37:F7:AD:BA:91:D2:A0:DD:7A:38:18:3A:A7:FB:30:C2:CE:B1:B4:75:CF:7B:7E:53:E0:6F:F9:8D:0B:71:D2:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon-1-----cc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon-1-----cc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Mar 2026 20:28:46 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 28 Feb 2026 21:09:06 GMT\r\nConnection: keep-alive\r\nETag: \"69a35972-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-07-09T23:44:10.509773Z","times_seen":47,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}