{"report_id":"ed887d49-65b1-4ec3-b66a-07b3cd9f222f","version":6,"status":"done","tags":[],"date":"2026-05-25T10:15:35Z","url":{"schema":"https","addr":"slon---5c-c.ru","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon---5c-c.ru/","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"title":"Slon5 — Телескопы и астрономическое оборудование в Москве | Slon5.cc","dom":{"size":39247,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (318)","md5":"681e54259d5c3ac99e05340a234f187d","sha1":"1d6a99928e381e52fdf06accd7a1f62f20980c51","sha256":"b450012206b757babe87be57de96d6cef3db60fc44275745ac9b39baa23afb19","sha512":"34ea3af7efef5092f2d78429649dd3b99dbd3c4b10ef16799c3f09c9eae8ec227ccee47992dad7e7fcc53a94bc8ee4870feacf831cd1a978f1f99beceb6f5705","ssdeep":"384:l7z9Om/TVHFiaB2TwVTi0HUsANZVWyCcPipRrq1oevkT4q50KXK:l7z9nVliakTm0jHPGvSk/50X","tlshash":"5703c97061b454ba2107e4c6e9546b0e38a5d47fed2b1b5136fc58ae2fd38a1ce2630f","dom_hash":"domhashe773b43b4f51e24977eee41f8e746bdb","first_seen":"2026-05-25T10:15:37.903198Z","last_seen":"2026-05-25T10:15:37.903198Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon---5c-c.ru","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":0,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T10:15:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon---5c-c.ru","ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-05-25T10:15:35.1054Z","last_seen":"2026-05-25T10:15:35.1054Z","alert_count":0,"request_count":2,"received_data":44822,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon---5c-c.ru/","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3235004ecb8bd89937b318721f322a60","sha1":"a4fda0b97d723ea9d245c40feb9f93560758c00d","sha256":"65b6ab13a1d788a9b0efc5bb20df3293826f689d391aa0c311d45f38e8de38eb","sha512":"0d5b51f840e9d46610856aa0ab7beb583c857c041069087320c4091972acdace772f969f73b2728d281f943bf26d8391cb92c289ff4c8c3a956a4f10ab9558a0","ssdeep":"","tlshash":"8df041e73ccd4038c7b302753b7392493079263f380eec52b80c28522f84e6514a7a0c","size":621,"data":"","first_seen":"2026-05-25T10:15:37.91389Z","last_seen":"2026-05-25T10:15:37.91389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon---5c-c.ru/","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b43f1407c8618e2399659c2f182a636","sha1":"0cfeb26d36fd71f54a0a365803bdaf8b67b0d046","sha256":"fe04d1aa1988ca58fe6a8de21e5fb68f8b96841f09b577cd1c8a76b0008be8ac","sha512":"6e9e98336deb7137822cb338c43bec3fae9b6af278d998d6bd6fd94253832b7f9aae55e6b3af58f5be497b27b3f232ebd8cf75f9affd68c143b5095071f4ccfd","ssdeep":"","tlshash":"f641ed9677b945fb04fe17a790d613e53d651086244b41292ef88ccd1ac5dc22cb2ee3","size":1930,"data":"","first_seen":"2026-05-25T10:15:37.916653Z","last_seen":"2026-05-25T10:15:37.916653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon---5c-c.ru/favicon.ico","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon---5c-c.ru/","date":"2026-05-25T10:15:13.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon---5c-c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 00:56:55 GMT","end":"Sat, 25 Jul 2026 00:56:54 GMT"},"fingerprint":{"sha1":"9B:5F:37:F6:D4:80:57:31:EE:06:DE:97:10:8C:8E:FB:5A:5F:CA:A0","sha256":"C6:D0:57:A6:1F:B8:78:6A:DD:F7:A1:28:34:C5:AD:D1:1D:66:0A:35:B9:E4:09:D4:66:DF:D8:E4:13:91:C7:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon---5c-c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon---5c-c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 25 May 2026 10:15:13 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 25 Apr 2026 23:32:01 GMT\r\nConnection: keep-alive\r\nETag: \"69ed4ef1-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"f90dc97292c61ac05189301568564212","sha1":"f39bd72b576992385df1e1a449b5bdb8b80a3e74","sha256":"c8e72a6a9a55265d389d6c160e1e6c020bbd8c8807a8d538a68f02036ba05028","sha512":"ffe2c11b5190abed211f6465d88712c37bc2ed4d63e3a0727c6971523c2d7be45bb30614eb2d68083d396c99b4f17a08693a3b647fbb180c44f96132e26589af","ssdeep":"12:sH2DbjggggggggPoZA6MrlX0zPAl/Z5+X0tRomEXGqrEscWP17DO2y0zEWCQtVG+:sWP6MrlX0kHec+WqLPxDO2y04WDuPts","tlshash":"73918c40a2d2b699d18967310ca7cf7423719c48c81b1b2b72ed3d973df52c235192c0","first_seen":"2026-02-16T17:49:08.182201Z","last_seen":"2026-08-10T14:38:22.231923Z","times_seen":48,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon---5c-c.ru/","fqdn":"slon---5c-c.ru","domain":"slon---5c-c.ru","tld":"ru"},"ip":{"addr":"216.203.20.115","port":443,"asn":1828,"as":"UNITAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T10:15:13.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon---5c-c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 00:56:55 GMT","end":"Sat, 25 Jul 2026 00:56:54 GMT"},"fingerprint":{"sha1":"9B:5F:37:F6:D4:80:57:31:EE:06:DE:97:10:8C:8E:FB:5A:5F:CA:A0","sha256":"C6:D0:57:A6:1F:B8:78:6A:DD:F7:A1:28:34:C5:AD:D1:1D:66:0A:35:B9:E4:09:D4:66:DF:D8:E4:13:91:C7:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon---5c-c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 25 May 2026 10:15:13 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sat, 25 Apr 2026 23:32:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ed4ef1-9c6b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40043,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (318), with CRLF line terminators","md5":"2c4f10fa8353b68ef53fc72de5bc180c","sha1":"1ee5cb73484ec425c61a0617e8ed2721272c779d","sha256":"44d8116d1844f8dc7b165b085e514584d33090b54fcdbc631bb4fcc64cdaecbf","sha512":"c0b5f54f4c68e073fdde8942705a0179bb27003442de48cf4595487d2e3347f642a44b3309720077293a2f2b521207464e59617fb028e459a3fdf5a9e62291ba","ssdeep":"384:Xwi9iGoBUR1o8xGJSPWmVIMjMcY8uPxTcB8rBkC31WCE/ARJ6jg8AJKZVyI:Xwi9tRGMWZ8uJHZ1/xqgHKZl","tlshash":"5a03a660a18464ba1137e486d9506b0dfca9d17fae270b5135fc69af2fe3960ca1370f","first_seen":"2026-05-25T10:15:37.910504Z","last_seen":"2026-05-25T10:15:37.910504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":110,"dns":52,"connect":25,"send":0,"wait":52,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}