{"report_id":"fade0ee9-39a2-4d74-a57e-9ab935a49963","version":6,"status":"done","tags":[],"date":"2026-03-24T09:04:32Z","url":{"schema":"https","addr":"slon2--c---c.ru","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"slon2--c---c.ru/","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"title":"Slon2 cc — поставки промышленного оборудования для водоснабжения и канализации в Москве","dom":{"size":13141,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"375f4c67d245dfac7bdd6940b1654364","sha1":"d782c283648434880c4a9ee36f796c5178bb9a4e","sha256":"85ec891cb730c2eeca50c4edd0706f07397d3eaa2c2be0f365ff7322240570a9","sha512":"61eb1f5aceaab62681fe94767eb0bfbd9ca54c769a3eaae81febd0c4b9f4bb7570476b948674a272af476e5af2934923d0a948d3305595d5ca78920aa1205888","ssdeep":"384:eO2gigy8Zeg5z2HVzZtqxkwzFcUE1iHdiC:eO2gigy8ZeAezZtqxoksC","tlshash":"1542f03158fa58991101a007dd04ae4d3cba84ff7b2a5762316c2dbe3ff2794ca6b719","dom_hash":"domhash59effd593f674d4b6b548e0bfc63ba03","first_seen":"2026-03-24T09:04:37.225299Z","last_seen":"2026-03-24T09:04:37.225299Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon2--c---c.ru","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T09:04:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mc.yandex.ru","ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2026-03-21T04:21:09.651899Z","alert_count":0,"request_count":1,"received_data":246454,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"slon2--c---c.ru","ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":166214,"sent_data":3160,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2026-03-19T06:15:46.160381Z","alert_count":0,"request_count":5,"received_data":6847,"sent_data":6293,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon2--c---c.ru/","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dfd39283e6e6484058b570d52227354","sha1":"56332d63507cefb21f1a62a74c93562d7b50f923","sha256":"41e5977069cd38b706a5906e0d4f431a6377ece493f89523c58c8c0807542b58","sha512":"6b5afeb29dfdb9b40c29423ebf2888d0f6b70197246d322cc49e651d89149e6b7fc5318422d63093cdd434361302a1c523b88d10e72c4f93ef9c46340aa6f7e9","ssdeep":"192:W3q3AQLZ3gRFeP7rcZZuNP4f6AJxnYN/PVzy8vlcqMK6ay+wsTKFcUEHViHdi7:WaDgy8Zeg5z2HVzZtqxkwzFcUE1iHdi7","tlshash":"8542ff3154fa28991101a017dd04af4d3cba84bf7b1a6762316c2dbe3ff2694ca6b71d","size":12028,"data":"","first_seen":"2026-03-24T09:04:37.238665Z","last_seen":"2026-03-24T09:04:37.238665Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/script.js?v=1774343051491","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1949b30ac081b01017f2355c18f78e8","sha1":"40bbd530a1b882ce149e691adf5f350467016ad8","sha256":"d22ecdbc5aaed292e3208883190bf541105c439165930649e8c584ff6d836119","sha512":"e98ac7faa46b821daca95322f2cf5544029cd534b36694756b97edbb0b05c72bffa5c524f30689135bbbde72398e21006d189932f36a371c0cadd8923531fb52","ssdeep":"","tlshash":"d8e02b7561a298b00ab771af63d71284b47a009f780d90c1781c4d580f14ad543b3f59","size":402,"data":"","first_seen":"2026-03-16T22:20:51.416703Z","last_seen":"2026-03-28T22:34:37.863223Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=105366217","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba92283acbefc268619890aad0f74a1","sha1":"6dfb5a6affc2f5f62f7da4b28922888cf5b79d7e","sha256":"fa290750b0fa9c92aaff4ab2bb5505e8761d5f5db89bdc37eb1d8576eecb6d8d","sha512":"cd574e9286c1d1e8c4bc279f9ea29caf1cd328b76dfe6fe8c498e17cc47887801a97ab0e8103d3731feeeeac94707cbb5a82cd0d1939891c8d94623e5bbdb227","ssdeep":"6144:q9df/bjY61R1uO8GGUpQd04i0SqotbdFrVwz:Yf/bjfdujGzpKoZdFrqz","tlshash":"2c34e7d976827476937334b4903f000b71bfa896f14c89a4e186d9d97e389ac9237f6c","size":245611,"data":"","first_seen":"2026-03-24T09:04:37.237498Z","last_seen":"2026-03-24T09:04:37.237498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"slon2--c---c.ru/script.js?v=1774343051491","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /script.js?v=1774343051491 HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Mar 2026 09:21:53 GMT\r\netag: W/\"69ba6eb1-192\"\r\nexpires: Wed, 25 Mar 2026 09:04:04 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":402,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d1949b30ac081b01017f2355c18f78e8","sha1":"40bbd530a1b882ce149e691adf5f350467016ad8","sha256":"d22ecdbc5aaed292e3208883190bf541105c439165930649e8c584ff6d836119","sha512":"e98ac7faa46b821daca95322f2cf5544029cd534b36694756b97edbb0b05c72bffa5c524f30689135bbbde72398e21006d189932f36a371c0cadd8923531fb52","ssdeep":"","tlshash":"d8e02b7561a298b00ab771af63d71284b47a009f780d90c1781c4d580f14ad543b3f59","first_seen":"2026-03-16T22:20:51.416703Z","last_seen":"2026-03-28T22:34:37.863223Z","times_seen":20,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/105366217/1?wmode=7\u0026page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090411%3Aet%3A1774343052%3Ac%3A1%3Arn%3A687183713%3Arqn%3A1%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A611%3Awv%3A2%3Ads%3A55%2C60%2C104%2C0%2C1%2C0%2C%2C372%2C4%2C%2C%2C%2C604%3Aco%3A0%3Acpf%3A1%3Ans%3A1774343050888%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1774343052%3At%3ASlon2%20cc%20%E2%80%94%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B8%20%D0%BF%D1%80%D0%BE%D0%BC%D1%8B%D1%88%D0%BB%D0%B5%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%BE%D0%B4%D0%BE%D1%81%D0%BD%D0%B0%D0%B1%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%20%D0%B2%20%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B5\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2884476420%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/105366217/1?wmode=7\u0026page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090411%3Aet%3A1774343052%3Ac%3A1%3Arn%3A687183713%3Arqn%3A1%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A611%3Awv%3A2%3Ads%3A55%2C60%2C104%2C0%2C1%2C0%2C%2C372%2C4%2C%2C%2C%2C604%3Aco%3A0%3Acpf%3A1%3Ans%3A1774343050888%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1774343052%3At%3ASlon2%20cc%20%E2%80%94%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B8%20%D0%BF%D1%80%D0%BE%D0%BC%D1%8B%D1%88%D0%BB%D0%B5%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%BE%D0%B4%D0%BE%D1%81%D0%BD%D0%B0%D0%B1%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%20%D0%B2%20%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B5\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2884476420%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://slon2--c---c.ru\r\nReferer: https://slon2--c---c.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=2377569671774343051; i=WeAjrj0U2JTqXSDhC8WAGxI3KerTGHXUWTK5n7D4tVYlXBzSwsS8CkFtKayOialxZWFEtwW+lEle0cwtHQX/maJiNC8=; yandexuid=2236585661774343051; yuidss=2236585661774343051; ymex=1805879051.yrts.1774343051#1805879051.yrtsi.1774343051; bh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 717\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://slon2--c---c.ru\r\nexpires: Tue, 24-Mar-2026 09:04:11 GMT\r\nlast-modified: Tue, 24-Mar-2026 09:04:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1f1d85f695d4c135df44dd0f5166224d","sha1":"61b37e6a2cc34e0093f5c416ec51b81a87cbe36f","sha256":"99b82a9a3a9a654ed1228ff05ac8617936c59ae71cd731e42ee61efcb04ef21b","sha512":"ad3d11dd14863da0b0c3731a26fa3035905345b767b1f6be9e172f3e759d57a775fa428c017b69a6ae50d840fafa1101e6c043053e4a6f4041dad6442a30ef56","ssdeep":"","tlshash":"9d014446a01c4bfbeddfcb5908a432972859701c5e87235517c2c3668c8edf372528e9","first_seen":"2026-03-24T09:04:37.228845Z","last_seen":"2026-03-24T09:04:37.228845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"mc.yandex.com/solid.ws","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /solid.ws HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://slon2--c---c.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VXywWLckcwtoJuKZKRCUpA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: yabs-sid=2377569671774343051; i=WeAjrj0U2JTqXSDhC8WAGxI3KerTGHXUWTK5n7D4tVYlXBzSwsS8CkFtKayOialxZWFEtwW+lEle0cwtHQX/maJiNC8=; yandexuid=2236585661774343051; yuidss=2236585661774343051; ymex=1805879051.yrts.1774343051#1805879051.yrtsi.1774343051; bh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Extensions: permessage-deflate;server_max_window_bits=15\r\nSec-WebSocket-Accept: MD9HD21owjZ52SJ8FrBj2aSEWdU=\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":1,"connect":45,"send":0,"wait":52,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/style.css","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Mar 2026 09:21:53 GMT\r\netag: W/\"69ba6eb1-310d\"\r\nexpires: Wed, 25 Mar 2026 09:04:04 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":12557,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a3ada102f63d9538e588ccf599774831","sha1":"53e759ede3218fb614ea1c58331b4a12dca697ad","sha256":"ff9988b42ff2ce1d2ee6b20f415f87ff7ea83b3cb5f927b93c0882509e322c03","sha512":"d9ab80101185fdf59832fb1f2b63704594c9ef814c6f5f7d5b6e964f55fe7ab0c826699d8d221a4da917a34e9622c9968eefbcf0785d19ca924a092bf53b221a","ssdeep":"192:7UNAsvsQc0pqijkZBu327pDPIhkCnlfNwOzYs165lNoNxo4f/faGUpu1LT:IN7l04hk2ENofBHNd","tlshash":"e2421fd72ba81504791ad4b8bd92db5673acd443c10fcdb87bf4206cadca3d549a2b8c","first_seen":"2025-12-31T18:53:56.781083Z","last_seen":"2026-04-13T10:44:14.168697Z","times_seen":34,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/images/2.png","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /images/2.png HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 18004\r\nlast-modified: Wed, 18 Mar 2026 09:21:54 GMT\r\netag: \"69ba6eb2-4654\"\r\nexpires: Wed, 25 Mar 2026 09:04:04 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":18004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 120, 8-bit grayscale, non-interlaced","md5":"d45f6fd593c1313b5150a49314983521","sha1":"b85eeba8b012cca6111872b955030dd7f562ffa1","sha256":"854e0eb687a3472c7774c5f63b9604323b2eb40ccd2e54ad3eb95669fb08e9e0","sha512":"be341ce2fa4d08c0c39ffdd562632736e3b8f5faea0ffd17379e715f406acfed4fcf454b14652aa07a27daedc048ac911b5e688cce67f25a44e0fdae81eab00c","ssdeep":"384:HKxPbN13gKOuzTjzyo1+TuQ5Su42kUe1muE+:H2PQUyo1WpAA6","tlshash":"8f82d0f8a87c5de3cc31161a8b1c64be814616ead3ee9288435dd7580e7613ce5e6f80","first_seen":"2025-12-31T18:53:56.783562Z","last_seen":"2026-04-13T10:44:14.169895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/favicon.ico","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 101392\r\nlast-modified: Wed, 18 Mar 2026 09:21:54 GMT\r\netag: \"69ba6eb2-18c10\"\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":101392,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"43c85273b4ffd1311892b0b527407e30","sha1":"e34da69cef0622072b99bf9f865bbbb3d4bac300","sha256":"e96845bcd9e448763b3e667e7186cb25270f664a680c479cf33074dcf2aed3dd","sha512":"f282496529c943611f6dbe100c3d73764175e20ec43ad3244c53b16e6db6d5c5782bcb0baa2dd7659cfc589e2d2e609a69ebeb9c3aedc63d4ea82894b2b08b82","ssdeep":"192:1NIrfSnBw6OnFlEkEkEkEdHHHTHHHPUkU93jX9Rhkuncw+0xXz4Rv:18SnBw/YHHHTHHHE3jX97xcw+014d","tlshash":"aca35350b2d6f61ad1d876344c93ce792331ac958c175b2b32ce7f9b39f42a629093e4","first_seen":"2024-10-16T16:01:12.238269Z","last_seen":"2026-07-20T16:36:37.256084Z","times_seen":431,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/105366217?wmode=7\u0026page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090411%3Aet%3A1774343052%3Ac%3A1%3Arn%3A687183713%3Arqn%3A1%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A611%3Awv%3A2%3Ads%3A55%2C60%2C104%2C0%2C1%2C0%2C%2C372%2C4%2C%2C%2C%2C604%3Aco%3A0%3Acpf%3A1%3Ans%3A1774343050888%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1774343052%3At%3ASlon2%20cc%20%E2%80%94%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B8%20%D0%BF%D1%80%D0%BE%D0%BC%D1%8B%D1%88%D0%BB%D0%B5%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%BE%D0%B4%D0%BE%D1%81%D0%BD%D0%B0%D0%B1%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%20%D0%B2%20%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B5\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(84476420)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/105366217?wmode=7\u0026page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090411%3Aet%3A1774343052%3Ac%3A1%3Arn%3A687183713%3Arqn%3A1%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A611%3Awv%3A2%3Ads%3A55%2C60%2C104%2C0%2C1%2C0%2C%2C372%2C4%2C%2C%2C%2C604%3Aco%3A0%3Acpf%3A1%3Ans%3A1774343050888%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1774343052%3At%3ASlon2%20cc%20%E2%80%94%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B8%20%D0%BF%D1%80%D0%BE%D0%BC%D1%8B%D1%88%D0%BB%D0%B5%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%BE%D0%B4%D0%BE%D1%81%D0%BD%D0%B0%D0%B1%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%20%D0%B2%20%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B5\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(84476420)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://slon2--c---c.ru/\r\nOrigin: https://slon2--c---c.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: https://slon2--c---c.ru\r\nset-cookie: yabs-sid=2377569671774343051; Path=/; SameSite=None; Secure\ni=WeAjrj0U2JTqXSDhC8WAGxI3KerTGHXUWTK5n7D4tVYlXBzSwsS8CkFtKayOialxZWFEtwW+lEle0cwtHQX/maJiNC8=; Expires=Fri, 21-Mar-2036 09:04:08 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2236585661774343051; Expires=Fri, 21-Mar-2036 09:04:08 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=2236585661774343051; Expires=Wed, 24-Mar-2027 09:04:11 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1805879051.yrts.1774343051#1805879051.yrtsi.1774343051; Expires=Wed, 24-Mar-2027 09:04:11 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 28 Apr 2027 09:04:11 GMT; SameSite=None; Secure\nbh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 28 Apr 2027 09:04:11 GMT; SameSite=None; Secure\r\nlocation: /watch/105366217/1?wmode=7\u0026page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090411%3Aet%3A1774343052%3Ac%3A1%3Arn%3A687183713%3Arqn%3A1%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A611%3Awv%3A2%3Ads%3A55%2C60%2C104%2C0%2C1%2C0%2C%2C372%2C4%2C%2C%2C%2C604%3Aco%3A0%3Acpf%3A1%3Ans%3A1774343050888%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1774343052%3At%3ASlon2%20cc%20%E2%80%94%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B8%20%D0%BF%D1%80%D0%BE%D0%BC%D1%8B%D1%88%D0%BB%D0%B5%D0%BD%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%BE%D0%B4%D0%BE%D1%81%D0%BD%D0%B0%D0%B1%D0%B6%D0%B5%D0%BD%D0%B8%D1%8F%20%D0%B8%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%20%D0%B2%20%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B5\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2884476420%29ti%281%29\u0026redirnss=1\r\nexpires: Tue, 24-Mar-2026 09:04:11 GMT\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Tue, 24-Mar-2026 09:04:11 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/images/1.png","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /images/1.png HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nCookie: _ym_uid=1774343052394444430; _ym_d=1774343052\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 18032\r\nlast-modified: Wed, 18 Mar 2026 09:21:54 GMT\r\netag: \"69ba6eb2-4670\"\r\nexpires: Wed, 25 Mar 2026 09:04:04 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":18032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 120, 8-bit grayscale, non-interlaced","md5":"04478c73a47ef172404946f8b40aa4e5","sha1":"619dcaccb927c13faa8f0c67586f073e1eae7a62","sha256":"36bc65d5b7ac23d2e1b81b3306332ee2c23697cc7ddc51de8d593be237807e45","sha512":"a73efa67e945b639518d0d1bf2c4b30084f7dc73542713b3bb2da130cc5e6725a44514f2c8f1d18e36b71d43eebda8bc25ed76ee3e425612ab7e505d7b9aa23b","ssdeep":"384:21otthCqMvoMPHOqhbcNn6RjiaVL7evJnMuDQO+MhhO:WeXlMHTIQAaVL7aM95MhO","tlshash":"1482c018717186d3b099213debf37f126e57c38f3566b16abda0912d2ed696f8020ac4","first_seen":"2026-01-05T16:49:11.301675Z","last_seen":"2026-03-28T04:52:41.901397Z","times_seen":9,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif?t=gdpr(14)ti(4)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/advert.gif?t=gdpr(14)ti(4) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Tue, 24 Mar 2026 10:04:11 GMT\r\ncontent-type: image/gif\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\netag: \"6989c49a-2b\"\r\nset-cookie: bh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 28 Apr 2027 09:04:11 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 09 Feb 2026 11:27:22 GMT\r\ntiming-allow-origin: *\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-10T05:15:35.172225Z","times_seen":111177,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/105366217?page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026hidv2=1435461723486945604\u0026hittoken=1774343051_2b7be928b8a5b770da4c5b205742941db280c8d30bab83b769b5947801f0409d\u0026browser-info=nb%3A1%3Acl%3A157%3Aar%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090426%3Aet%3A1774343067%3Ac%3A1%3Arn%3A804245421%3Arqn%3A2%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C946%2C946%2C1%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1774343050888%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1774343067\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)ecs(0)cdl(na)eco(84476420)prs(2)wss(2)w2s(16)evs(MTA1MzY2MjE3OjA6NywxMDUzNjYyMTc6MDo4LDEwNTM2NjIxNzowOjk%3D)evt(157)ti(0)\u0026force-urlencoded=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:26.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"POST /watch/105366217?page-url=https%3A%2F%2Fslon2--c---c.ru%2F\u0026charset=utf-8\u0026hidv2=1435461723486945604\u0026hittoken=1774343051_2b7be928b8a5b770da4c5b205742941db280c8d30bab83b769b5947801f0409d\u0026browser-info=nb%3A1%3Acl%3A157%3Aar%3A1%3Avf%3Avtcs89ph60k3d1axo71ynp1yap0ij%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2421%3Acn%3A1%3Adp%3A0%3Als%3A1200270084819%3Ahid%3A557385500%3Az%3A0%3Ai%3A20260324090426%3Aet%3A1774343067%3Ac%3A1%3Arn%3A804245421%3Arqn%3A2%3Au%3A1774343052394444430%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C946%2C946%2C1%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1774343050888%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1774343067\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)ecs(0)cdl(na)eco(84476420)prs(2)wss(2)w2s(16)evs(MTA1MzY2MjE3OjA6NywxMDUzNjYyMTc6MDo4LDEwNTM2NjIxNzowOjk%3D)evt(157)ti(0)\u0026force-urlencoded=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://slon2--c---c.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nCookie: yabs-sid=2377569671774343051; i=WeAjrj0U2JTqXSDhC8WAGxI3KerTGHXUWTK5n7D4tVYlXBzSwsS8CkFtKayOialxZWFEtwW+lEle0cwtHQX/maJiNC8=; yandexuid=2236585661774343051; yuidss=2236585661774343051; ymex=1805879051.yrts.1774343051#1805879051.yrtsi.1774343051; bh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nexpires: Tue, 24-Mar-2026 09:04:26 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://slon2--c---c.ru\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nlast-modified: Tue, 24-Mar-2026 09:04:26 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-10T05:15:35.172225Z","times_seen":111177,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T09:04:10.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":13594,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"88c5d0990ddbda9daf5133ce6917e66e","sha1":"936e8560e0e5bb69f35d1dadf87a07824988cc99","sha256":"5b96b32552f168cdcb886d78106d8bd6728d121e8979e9ac9aab4b72a1259e4e","sha512":"d68eba714cd3236910ebf064edd0f83166a309808b9225af40831590a953da2ed00052810262f50a942baf4b56a883f60373851398b34fea890847e0f9ea8a34","ssdeep":"384:Fhd6pFmvZcZXJFIRPoC6U+vrzwx0YAcXZFI1y9yMGEtikni1:Fhd6pFmvZcLFIRPh6U+jzwx0YAcXZZcl","tlshash":"3852fe7155d628991021a01bdd04af4cfcb980ff3b265362316c2eaf3ff2754ca6b619","first_seen":"2026-03-24T09:04:37.234542Z","last_seen":"2026-03-24T09:04:37.234542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":112,"dns":55,"connect":24,"send":0,"wait":104,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon2--c---c.ru/css2?family=Roboto\u0026display=swap","fqdn":"slon2--c---c.ru","domain":"slon2--c---c.ru","tld":"ru"},"ip":{"addr":"198.13.158.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon2--c---c.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 09:34:22 GMT","end":"Tue, 16 Jun 2026 09:34:21 GMT"},"fingerprint":{"sha1":"8D:29:32:D8:09:C0:5D:A8:12:2D:07:C2:7E:A1:2E:3E:90:7C:B0:66","sha256":"80:05:DC:2C:C9:B8:9E:CC:30:98:36:AD:4A:E2:15:BA:E8:AC:A8:9A:59:10:DF:2A:F2:4E:5C:2C:9B:7A:AD:33"}}},"request":{"raw":"GET /css2?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: slon2--c---c.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: Angie\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-edge-cookie-ok: 0\r\nx-edge-protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T05:49:31.527703Z","times_seen":547864,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=105366217","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon2--c---c.ru/","date":"2026-03-24T09:04:11.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/tag.js?id=105366217 HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon2--c---c.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nset-cookie: bh=YIunic4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 28 Apr 2027 09:04:11 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: application/javascript\r\nexpires: Tue, 24 Mar 2026 10:04:11 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"fa290750b0fa9c92aaff4ab2bb5505e8761d5f5db89bdc37eb1d8576eecb6d8d\"\r\ndate: Tue, 24 Mar 2026 09:04:11 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245611,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1047)","md5":"5ba92283acbefc268619890aad0f74a1","sha1":"6dfb5a6affc2f5f62f7da4b28922888cf5b79d7e","sha256":"fa290750b0fa9c92aaff4ab2bb5505e8761d5f5db89bdc37eb1d8576eecb6d8d","sha512":"cd574e9286c1d1e8c4bc279f9ea29caf1cd328b76dfe6fe8c498e17cc47887801a97ab0e8103d3731feeeeac94707cbb5a82cd0d1939891c8d94623e5bbdb227","ssdeep":"6144:q9df/bjY61R1uO8GGUpQd04i0SqotbdFrVwz:Yf/bjfdujGzpKoZdFrqz","tlshash":"2c34e7d976827476937334b4903f000b71bfa896f14c89a4e186d9d97e389ac9237f6c","first_seen":"2026-03-24T09:04:37.237498Z","last_seen":"2026-03-24T09:04:37.237498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":158,"dns":0,"connect":43,"send":0,"wait":100,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}