{"report_id":"cbb72fd3-6ab9-47a1-a3c1-27a229a85b73","version":6,"status":"done","tags":[],"date":"2026-03-28T04:57:54Z","url":{"schema":"https","addr":"slon1at-a.org","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"slon1at-a.org/","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"title":"slon1.at — дизайнерские вентиляционные решётки в Москве","dom":{"size":11604,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fb293753f8529788b64fe3bc39f8d9ac","sha1":"50d1401f3e3ae58fe3137498f09ed7f9f8687296","sha256":"9f2a325060beb4e77290a5ebbd4d57cb3dd9779ef9b20a6202197efde184092a","sha512":"92398b37d0942736719743dee59346689683ae52967af1fc4bb08fb57d2abe5f8e3c46a62a7ee6d3119c4e75ca7e8e48abfcef04a72d3f1e38f7e0e9e54a6030","ssdeep":"192:Ae0CeNUe0wKueG5de0ae08r9g9djfc3p8e0/eMe0ovYFe0pVfgERev8nhYVb/Gew:AqTYVdi0r9WE3eXRBMERw8EGYjGH","tlshash":"6832df7144dd1c9b1305a11ada01bb0c5d6e80bf6b2a1b53349c1ebf7fe6168887b71a","dom_hash":"domhash7ad2c039f2dd662949bec725c7f99d48","first_seen":"2026-03-28T04:57:57.420647Z","last_seen":"2026-03-28T04:57:57.420647Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon1at-a.org","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"ip":{"addr":"198.251.84.254","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T04:57:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon1at-a.org","ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-02-24","domain_rank":0,"first_seen":"2026-03-28T04:57:54.335431Z","last_seen":"2026-03-28T04:57:54.335431Z","alert_count":0,"request_count":2,"received_data":16542,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon1at-a.org/","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc8c68c417a4bd88fc6d9d1731f7c6b3","sha1":"9cfa872d00f3ed27bfc01438f40f4ee2c46464ba","sha256":"73facce43fa47d993c99c195f3379378234961442be715b24b2cf5c60aadb6a5","sha512":"57c05a254f757a8e3d0eb91fb28bb3e4737a94c267ba9436715e1c47c34c8379c68ef8d926acc829252e7a2c08c7d751928f45270404bc2bed50d56d77587d4b","ssdeep":"","tlshash":"14f00ca63c8a013887b712aa3b7392883439252f340eac12f90e18562f80e6518a791c","size":621,"data":"","first_seen":"2026-03-28T04:57:57.423617Z","last_seen":"2026-03-28T04:57:57.423617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon1at-a.org/","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:57:32.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon1at-a.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 18:39:35 GMT","end":"Mon, 25 May 2026 18:39:34 GMT"},"fingerprint":{"sha1":"B4:94:A6:4D:A3:B7:DF:24:B0:AB:41:C2:26:05:43:1E:36:A1:4F:20","sha256":"3B:F3:5E:43:31:A7:D2:BC:AA:1A:C6:80:5F:4F:86:60:1F:2C:76:D7:D3:1E:7D:D6:C6:F6:85:14:E9:19:96:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon1at-a.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 04:57:14 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 24 Feb 2026 19:27:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"699dfbbd-2e01\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11777,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4f9eb9608f5478cfd35e300ce216baa9","sha1":"96cba33a67ad59fb7d6b43207602f2f7eaa91178","sha256":"1c5a558a6b3609c43c43a1b57e33f6346e0186d333fa412fe5fb8351a75e87dd","sha512":"234c898fe988aed11c48f6cbb53c739e9d33fb224a5b5c180d97461eff7cae4fecdf4ca87e0de885809f4a273ea22920e371475baf4da19f767491132c2d44eb","ssdeep":"192:ae0xeNJe0V2euzje0Fe0e29q79dyhczgZe0ceke0ainre06VM5Cheo82PYVY2fbK:aZQkFtW297CzWU1bDChlZMb2wsl","tlshash":"b732e07105ce1c9b1335611ad501ba0ced6e807f6b2a1b5334ac2daf7ff6164c92b71a","first_seen":"2026-03-28T04:57:57.42191Z","last_seen":"2026-03-28T04:57:57.42191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":98,"dns":21,"connect":39,"send":0,"wait":34,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon1at-a.org/favicon.ico","fqdn":"slon1at-a.org","domain":"slon1at-a.org","tld":"org"},"ip":{"addr":"198.251.84.254","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon1at-a.org/","date":"2026-03-28T04:57:33.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon1at-a.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 18:39:35 GMT","end":"Mon, 25 May 2026 18:39:34 GMT"},"fingerprint":{"sha1":"B4:94:A6:4D:A3:B7:DF:24:B0:AB:41:C2:26:05:43:1E:36:A1:4F:20","sha256":"3B:F3:5E:43:31:A7:D2:BC:AA:1A:C6:80:5F:4F:86:60:1F:2C:76:D7:D3:1E:7D:D6:C6:F6:85:14:E9:19:96:A0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon1at-a.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon1at-a.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 04:57:14 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Tue, 24 Feb 2026 19:27:57 GMT\r\nConnection: keep-alive\r\nETag: \"699dfbbd-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-08-10T14:38:22.231923Z","times_seen":48,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}