{"report_id":"eb67586c-fd4b-4602-bafc-4d6d9a358198","version":6,"status":"done","tags":[],"date":"2026-03-28T04:44:39Z","url":{"schema":"https","addr":"slon3cc1.ru","fqdn":"slon3cc1.ru","domain":"slon3cc1.ru","tld":"ru"},"ip":{"addr":"209.141.42.45","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon3cc1.ru/","fqdn":"slon3cc1.ru","domain":"slon3cc1.ru","tld":"ru"},"title":"Мир профессиональных обнимателей slon3cc","dom":{"size":17218,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (798)","md5":"3dbdb375406fc6cad7e975860b39de45","sha1":"0d7e764c9a856f90e45e18952eefe38dbece1004","sha256":"14bb53c65b0747417955098985c5f32bfa6a38aa8f7a5751c5b3733b730a8343","sha512":"58e2bb67213c71864d31668ef6f932da5c48fac66cadb79857dbcfde1cd4d776071a14ff2f001a04e22fabd49c1902aca6e6e6a4d45f6125e09ab6875aa35e0b","ssdeep":"384:3cfgvYpq9sD//kTcbAvAj32ufOUM8rZEiN9n:+pXGvAjmwOUM8dH9n","tlshash":"ac72dc7194dd44da1201b44ae904bf4e7daa81fe3f6b535329682e7f76f2024c23e71a","dom_hash":"domhashd145d28ff7462b8bd1f65bf280293507","first_seen":"2026-03-28T04:44:42.091241Z","last_seen":"2026-03-28T04:44:42.091241Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon3cc1.ru","fqdn":"slon3cc1.ru","domain":"slon3cc1.ru","tld":"ru"},"ip":{"addr":"209.141.42.45","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T04:44:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon3cc1.ru","ip":{"addr":"209.141.42.45","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-03-28T04:44:39.573558Z","last_seen":"2026-03-28T04:44:39.573558Z","alert_count":0,"request_count":1,"received_data":17902,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3.firstvds.ru","ip":{"addr":"37.230.115.231","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2002-08-06","domain_rank":0,"first_seen":"2025-09-11T11:42:54.692973Z","last_seen":"2026-03-26T01:12:43.35505Z","alert_count":0,"request_count":1,"received_data":32915,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s.fotora.ru","ip":{"addr":"95.182.74.9","port":443,"asn":61372,"as":"AZIMUT TELECOM Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-22","domain_rank":0,"first_seen":"2026-03-18T02:39:44.58378Z","last_seen":"2026-03-28T04:33:01.917573Z","alert_count":0,"request_count":1,"received_data":15393,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon3cc1.ru/","fqdn":"slon3cc1.ru","domain":"slon3cc1.ru","tld":"ru"},"ip":{"addr":"209.141.42.45","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:44:17.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon3cc1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 18:24:41 GMT","end":"Sun, 21 Jun 2026 18:24:40 GMT"},"fingerprint":{"sha1":"D9:09:12:CE:13:78:8E:0D:61:E1:4D:B3:74:D3:A3:D4:CB:28:14:8F","sha256":"B0:42:3B:A4:D5:B0:1B:4D:AF:3B:D1:9B:19:59:70:B1:CC:5E:2D:52:B8:B6:18:5B:C7:1F:8D:7B:ED:E6:1D:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon3cc1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 28 Mar 2026 04:44:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 5243\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 08:58:33 GMT\r\nETag: \"44cc-64dc15b28b2b4-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17612,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (798), with LF, NEL line terminators","md5":"ac63248f0efb768720f896a472d9c56a","sha1":"dc5d497e5678f2c99e806639b70a169d2324bc46","sha256":"6d82c713f47b6baebb5077be562548ae23bed9dbd6c9713269a906d2e754b60b","sha512":"4fb3d4b7fe775f2befe608b525d422f330e0d404701a20c64db80392c7d32322d85cd75e8d153eb995ea9f6c85cd60372786c10639cbbc4088d67e0c698c3722","ssdeep":"192:xRi04gvYpUfCywdN/kTc6AAvjciCRMXZ53jo0aZui+tOUmwGMu8IVYGEXxfhndri:xcfgvYp3D//kTcbAvAjW2ufOUM8rGEV+","tlshash":"04820171d0dd54de1215a407f8047f4d2caac0fe6bae4367256c2b7e7ae61e0c23e25a","first_seen":"2026-03-28T04:44:42.095101Z","last_seen":"2026-03-28T04:44:42.095101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":347,"dns":55,"connect":144,"send":0,"wait":147,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.firstvds.ru/fotohosting/2026/03/09/1000008492.jpg","fqdn":"s3.firstvds.ru","domain":"firstvds.ru","tld":"ru"},"ip":{"addr":"37.230.115.231","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon3cc1.ru/","date":"2026-03-28T04:44:18.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.firstvds.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 20 Mar 2025 04:39:49 GMT","end":"Tue, 21 Apr 2026 04:39:48 GMT"},"fingerprint":{"sha1":"A1:53:6E:3C:AE:79:AC:3F:3A:EB:2F:8B:34:F3:D2:2E:0A:04:99:23","sha256":"9E:F8:2D:5F:14:DA:31:6C:58:17:B6:A8:B1:FB:AF:6B:A4:B6:D4:2F:60:C7:C2:4F:19:18:6C:64:66:B1:5D:48"}}},"request":{"raw":"GET /fotohosting/2026/03/09/1000008492.jpg HTTP/1.1\r\nHost: s3.firstvds.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon3cc1.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 32496\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 09 Mar 2026 07:52:49 GMT\r\nx-rgw-object-type: Normal\r\nETag: \"b11bf84d10c12754b1077fc5c6eb3d1d\"\r\nCache-Control: public, max-age=31536000\r\nx-amz-request-id: tx0000024e45dd606084aff-0069c75ca2-114055950-default\r\nContent-Type: image/jpeg\r\nServer: Ceph Object Gateway (tentacle)\r\nDate: Sat, 28 Mar 2026 04:44:18 GMT\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x900, components 3","md5":"b11bf84d10c12754b1077fc5c6eb3d1d","sha1":"258c1b88f0a891056e674aa1fbde129b4b1ff5c5","sha256":"a189774f593b18d6613069947f864f35050395800ed95153edf350d1363c0411","sha512":"ab045d9b54435fd18c72a023a47af764954ed4387c6e056ef047ba7723d7d4a09fbef32d715787ff887f5d1545a18a11c10dfa0d86079e177c47fd6dd287b106","ssdeep":"768:Vq+cRth/Av1xopsUGFVIHxwwN17dx+OuC5A+:VfM/AvvotGrIRPN9Zy+","tlshash":"ade2e1e7a61f825fdb873b350ee35f720f9a43d6659675f28700ac2ca42e1242cd5280","first_seen":"2026-03-17T07:46:42.01706Z","last_seen":"2026-04-14T18:17:22.243999Z","times_seen":35,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":30,"receive":34,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.fotora.ru/61e0089c3ec34835.jpeg","fqdn":"s.fotora.ru","domain":"fotora.ru","tld":"ru"},"ip":{"addr":"95.182.74.9","port":443,"asn":61372,"as":"AZIMUT TELECOM Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://slon3cc1.ru/","date":"2026-03-28T04:44:18.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.fotora.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:01:26 GMT","end":"Sat, 30 May 2026 13:01:25 GMT"},"fingerprint":{"sha1":"C4:18:E8:64:AE:CC:BC:10:F8:B5:99:A8:0D:4A:01:ED:F2:16:4F:2E","sha256":"B0:65:EE:D5:69:2A:F4:23:C9:A8:17:75:AB:3E:2C:04:E3:96:D3:3E:9B:84:BC:F8:05:E2:75:2E:8B:8B:C1:72"}}},"request":{"raw":"GET /61e0089c3ec34835.jpeg HTTP/1.1\r\nHost: s.fotora.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon3cc1.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 28 Mar 2026 04:44:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15102\r\nlast-modified: Tue, 24 Mar 2026 08:56:09 GMT\r\netag: \"69c251a9-3afe\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-served-by: s.fotora.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":15102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 40\", baseline, precision 8, 1117x374, components 3","md5":"bd6cc207ed580a7652f2751dcc891a7b","sha1":"b6eca200c088f3ae2f4c39e454a82d9cc7a938c6","sha256":"21e0282931f42414c17b824a963110bce05e4674993a0d743040c3d21fdfba6e","sha512":"00c3dc5e7213429c8350426bcfbf0849fb2335c1d992760c97eae83a8943443355cd3cc9a033b4e659042b6d63cf8f7b0f6c11ddf24d36bbeac3eb3a2e017175","ssdeep":"192:qw2c7to8Dp7/D4o02Q0Cl+nsokb/PVYHTOshKLD1/zNbkXbfCrEHLcGK:qPAo8Nq2McsrIDEzNbQf+EHLk","tlshash":"94628d5b9e312b81043a82593d070b6e1f6d7e5e4ad5272f58076d4378767f00c4e7ae","first_seen":"2026-03-28T04:44:42.10062Z","last_seen":"2026-03-28T04:44:42.10062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":113,"dns":1,"connect":50,"send":0,"wait":51,"receive":49,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}