{"report_id":"c2d305f4-45d5-4b2b-8384-0b66cec6487f","version":6,"status":"done","tags":[],"date":"2026-03-28T04:59:54Z","url":{"schema":"https","addr":"1slon3to.ru","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"ip":{"addr":"81.91.178.10","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"1slon3to.ru/","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"title":"slon3.to — интернет-магазин товаров для домашних животных в Москве.","dom":{"size":7221,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fa2433e3007bdc75c1dd2e162bc24676","sha1":"ff6eef586763e201cc2712d893bafff2078a7661","sha256":"8292df8c9568decdc5a53ef9b8d9c683527e9acd47d447de1f92a2d0465edab5","sha512":"b8e9cddda075f987782513a6ee3d53e99a61f2d3d265555ba8119330155ebaa86d00fdd7b70d2911a3cd63f96cfb482f8ba8546872b393a35ada4aa99e070bb5","ssdeep":"96:M2g9FNEXEQSpWgVfc7jDyA6tY4GKZ6scbUw6xvL+ENtT2D/l2OSSjCBf8wigrYRq:MffxpWqfc34Y4LQscbUrvLztttL","tlshash":"02e144e245482c9b3012e01bee106e4c66ba887f5b372fb666792c7ff5e61c4c53531a","dom_hash":"domhash50bdbc8168d9f32dafc05591f83ba4a2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"1slon3to.ru","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"ip":{"addr":"81.91.178.10","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T04:59:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1slon3to.ru","ip":{"addr":"81.91.178.10","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-03-28T04:59:54.454359Z","last_seen":"2026-03-28T04:59:54.454359Z","alert_count":0,"request_count":3,"received_data":15536,"sent_data":1641,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1slon3to.ru/","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"ip":{"addr":"81.91.178.10","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:59:33.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1slon3to.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 09:27:39 GMT","end":"Fri, 05 Jun 2026 09:27:38 GMT"},"fingerprint":{"sha1":"1A:72:BC:38:6D:79:FA:FB:20:AB:C1:56:76:93:FD:F6:1E:30:7A:0B","sha256":"8F:80:5B:72:07:2C:0C:B3:D5:07:97:67:10:F1:FB:12:A4:86:C1:AF:3D:4F:9E:13:54:67:AA:E6:CC:34:59:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1slon3to.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KUWfIrgRJQ9R578J; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg10_=1774673973; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg9_=91.90.42.154; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg1_=qF2gr71fW9TutUgSf7vJ; Domain=.1slon3to.ru; HttpOnly; Path=/; Expires=Sun, 28-Mar-2027 04:59:33 GMT\nPHPSESSID=b9832a3ac6bddadb1c6f088ccffad7fa; path=/\r\ndate: Sat, 28 Mar 2026 04:59:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.29\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a3ff45682eb0e7ee7accbfc822d0a295","sha1":"3df7c5d1c18c07978ff920811013e690e2eef4ef","sha256":"3775be0c3acdad9816e0d90033d25e9e49d9640bea169f29d7fecd7d6668f2c4","sha512":"73e700e4960c2b30ce0a3f603481847a705bec307ffebc60296a850e18d3174aa919998ec6268aacd5d46d9c28ebcd900881a4717c81766d674b714aaaff7a49","ssdeep":"96:q2giFNEXEQSpW9Vfc7jDyA6tYtGKZ6scbUw6xvL+ENtT2D/l2OSSjCBf8wigrYRY:qQfxpWTfc34YtLQscbUrvLztttZ","tlshash":"dce144e245482c9b3012e01bee106e4c66ba887f5b372fb666792c7ff5e61c4c53531a","first_seen":"2026-03-28T04:59:57.771712Z","last_seen":"2026-03-28T05:11:23.391183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":146,"dns":78,"connect":19,"send":0,"wait":330,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1slon3to.ru/favicon.ico","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"ip":{"addr":"81.91.178.10","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1slon3to.ru/","date":"2026-03-28T04:59:33.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1slon3to.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 09:27:39 GMT","end":"Fri, 05 Jun 2026 09:27:38 GMT"},"fingerprint":{"sha1":"1A:72:BC:38:6D:79:FA:FB:20:AB:C1:56:76:93:FD:F6:1E:30:7A:0B","sha256":"8F:80:5B:72:07:2C:0C:B3:D5:07:97:67:10:F1:FB:12:A4:86:C1:AF:3D:4F:9E:13:54:67:AA:E6:CC:34:59:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1slon3to.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1slon3to.ru/\r\nCookie: __ddg8_=KUWfIrgRJQ9R578J; __ddg10_=1774673973; __ddg9_=91.90.42.154; __ddg1_=qF2gr71fW9TutUgSf7vJ; PHPSESSID=b9832a3ac6bddadb1c6f088ccffad7fa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=od9Wji8qM25a2rG1; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg10_=1774673973; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg9_=91.90.42.154; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\r\ndate: Sat, 28 Mar 2026 04:59:33 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Wed, 11 Mar 2026 17:13:39 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-07-09T23:44:10.509773Z","times_seen":47,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1slon3to.ru/Untitled.jpg","fqdn":"1slon3to.ru","domain":"1slon3to.ru","tld":"ru"},"ip":{"addr":"81.91.178.10","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://1slon3to.ru/","date":"2026-03-28T04:59:33.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1slon3to.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 09:27:39 GMT","end":"Fri, 05 Jun 2026 09:27:38 GMT"},"fingerprint":{"sha1":"1A:72:BC:38:6D:79:FA:FB:20:AB:C1:56:76:93:FD:F6:1E:30:7A:0B","sha256":"8F:80:5B:72:07:2C:0C:B3:D5:07:97:67:10:F1:FB:12:A4:86:C1:AF:3D:4F:9E:13:54:67:AA:E6:CC:34:59:80"}}},"request":{"raw":"GET /Untitled.jpg HTTP/1.1\r\nHost: 1slon3to.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1slon3to.ru/\r\nCookie: __ddg8_=KUWfIrgRJQ9R578J; __ddg10_=1774673973; __ddg9_=91.90.42.154; __ddg1_=qF2gr71fW9TutUgSf7vJ; PHPSESSID=b9832a3ac6bddadb1c6f088ccffad7fa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3AqH9fWOXFXfkuP8; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg10_=1774673973; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\n__ddg9_=91.90.42.154; Domain=.1slon3to.ru; Path=/; Expires=Sat, 28-Mar-2026 05:19:33 GMT\r\ndate: Sat, 28 Mar 2026 04:59:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2265\r\nlast-modified: Wed, 11 Mar 2026 17:13:40 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 380x120, components 3","md5":"0ce913bf1983388144ef1f6dc2dd5a6f","sha1":"02f935e30e51a42a861ba27efd896bd525c6aafa","sha256":"a8dc66803df3304e7940eec66cc81958c676db952d63edf72195e8fc415c7ab0","sha512":"e8c1d3995e630fcd7aa86f675873ad0c0cdd560b952f5135fb963f636e0bab1649ea4cbd14f25e841028f5845b9bde042f1f7ef09dc8d5a1cff028e2a54a1d06","ssdeep":"","tlshash":"d541f9422f06c50ede742d7469212b462f3aea42650c97a532fa7fc54cf9ac39811a60","first_seen":"2026-03-16T13:28:53.876487Z","last_seen":"2026-03-28T05:11:23.394008Z","times_seen":6,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}