{"report_id":"8c1eee1f-a8da-45bc-90ab-6977ad30bd29","version":6,"status":"done","tags":[],"date":"2026-05-22T06:16:54Z","url":{"schema":"https","addr":"emspro.co.za","fqdn":"emspro.co.za","domain":"emspro.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"title":"EMS Pro - home page","dom":{"size":16901,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (897)","md5":"0082bdeb47f5377d2a71bf0c654f2c80","sha1":"77dffab48f1b8e2e3fe4f47ecc69a17b441f366d","sha256":"2d0e3174dc3149ecf5a0b494a7939324eb25eceae61a8a0137160db9acf52219","sha512":"449cbacbb4cb4f8a04c2f534a74248cf056bb647d100a83b897a0d9765bcc3ce197c37f659b70d8dd2f598f4d325972400cfab834103835295f003ed4bf34fac","ssdeep":"384:qZuLJHUQTQXIIgo8J1C3PxPAi8OrU9DxmVK5JD:qZuLJHU5XIIgo8J1C3PxP38OrScY51","tlshash":"ff720a229f48413b00a3416174315f5bb7bade79eb4758a150b8816c7bc4f8fef262d9","dom_hash":"domhash514ed0d0c9ca588a474643ee1055b607","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"emspro.co.za","fqdn":"emspro.co.za","domain":"emspro.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":0,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-26T06:16:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-22T06:16:34Z","timestamp":1779430594,"ip_dst":{"addr":"Client IP","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"174.138.7.87","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-05-22T06:16:34.620860+0000\",\"flow_id\":12532525983745,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"174.138.7.87\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=bro.freebasicpro.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:7B:50:1D:9A:C4:3D:BA:C6:86:A3:7E:03:C3:8E:1E:58:C8\",\"fingerprint\":\"5b:c4:7a:46:d0:5e:a4:ac:e8:37:eb:08:7e:05:e4:74:de:24:27:0f\",\"sni\":\"bro.freebasicpro.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-05-01T19:16:29\",\"notafter\":\"2026-07-30T19:16:28\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1008,\"bytes_toclient\":3402,\"start\":\"2026-05-22T06:16:34.550913+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"bro.freebasicpro.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"emspro.co.za","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"emspro.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"emspro.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bro.freebasicpro.xyz","ip":{"addr":"174.138.7.87","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-03-16T20:48:37.626878Z","last_seen":"2026-05-15T22:10:46.165971Z","alert_count":1,"request_count":1,"received_data":474,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"emspro.ucoz.net","ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":15,"received_data":633844,"sent_data":7811,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":12653,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"emspro.co.za","ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"domain_registered":"2005-01-18","domain_rank":0,"first_seen":"2026-05-22T03:18:25.60457Z","last_seen":"2026-05-22T03:18:25.60457Z","alert_count":3,"request_count":1,"received_data":16921,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":1,"received_data":20127,"sent_data":576,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"emspro.ucoz.net/?XQLFtlAVjf%5EEASCzt8FkpxHp%3Bg%3BKx1pfWp1Uw0Z7KGNcueN6wGc4vcJzeeq6JEVL18fpQCaz4XZ1bfUeVdvxNq0tOMC2%5EuuxcGNZUBhcY%21%5EMdsOf8vfiHXiAYeHf%21T2kj3b36ULaTiKz%21ApR%3BsZ1xWvNjkZiVCCdimj2%5EIbKtML03nm%21MX%215O1Pq%21L5jT5nhGFIrI22gCFTilp0OWWSlpz8nhLglE%3Boo","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6accc1e1c5b715beb46216b916bcfda5","sha1":"8c50d262439e483aa2c76fe739a601592491b3f0","sha256":"05f7cff0b84ea3f505f6afcd068fd2ea84ac7a1616e29255e6ad206cdddab97f","sha512":"3dd9e7b1a28fd45a92204c2b2d25178d7bbe8e0dd6552fb110b9a21ec20213371534fb6891438ae63bff377709698d9a12a9f831f9e910a2a231c922ccb4e868","ssdeep":"","tlshash":"fb11afe8bf5e1925852424a6742653fc247ce8313900a91bfc88f52da0c0f6c566f82c","size":867,"data":"","first_seen":"2026-03-16T22:23:59.820507Z","last_seen":"2026-07-12T13:57:18.954188Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebe6bc0803293713c0cd5ccbb6858263","sha1":"f7e12e4099d0b1539e6424fb35bed336f953239d","sha256":"de6c089a2079a7e9d7740a581839e60f99fc2b345f909a63fb8edce6e90dca4a","sha512":"c079cb149c70be220e088f01689c795503e869bff26b86815c8d69ddb8c1c4ad4aeb0b43959bf4f2693e985966d6110534a9ae2d209ca0a0e684769f0772b7fb","ssdeep":"","tlshash":"a5d0a7f00d1354e8e4424c77b41445e92c3964603d51721a105d313524c0f7136fb728","size":209,"data":"","first_seen":"2023-03-07T12:06:21Z","last_seen":"2026-07-12T13:57:19.005305Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"643968481bd70d1b90acb3623acc1cbf","sha1":"a48c24f35825a4f9a22bb98e54b972ab914d0da6","sha256":"1cc7811671da38d961a9ab7caf93a642e6b64d30f56cfe7e94370f25f190df2c","sha512":"6fe7915dcbbb0c8b3bf699a4885e34ae661e579b7f8a2e92486ec8d03a8caf58cc53881773f9bfd81c496327dfa06618ebc7ace29d7cced97f14e3ffbd61bf2a","ssdeep":"","tlshash":"f6d097f10c0310e8e0520c32b02880e82c3864603d91761b104c313520c0f7136ff718","size":217,"data":"","first_seen":"2023-03-07T12:06:21Z","last_seen":"2026-07-12T13:57:19.006178Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8891969ae54b782e8f5ac283399acca","sha1":"7d6bcb7b3cb4046aafab14d778a700f1ead83f93","sha256":"e084d693bfba8019d72f12e6cfd6797b2792a7b3bbe3b98f222867e53f65f806","sha512":"19aef4a090628bf0a544afa6997d4a99cede0a7f90a2324f0b3d07b6c4cc05ec5a7fdb1b7aca6bc9338e5cbceeeee605c1ac63e6428296ed1f952e385e444b0e","ssdeep":"","tlshash":"d4310ee4ae8e4079d063343da83ac54078283cb22cd9bd19903c41b52dc4f65bb57b9c","size":1711,"data":"","first_seen":"2023-03-26T09:34:22Z","last_seen":"2026-06-04T18:04:20.258017Z","times_seen":962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9113924b4d06ab1f82fa3e40dee8ba6b","sha1":"66d6be39d1e06438bf47df278a9bae8c61757512","sha256":"08e7d4395ca29fc4e7a99a37f34874c1fdafb0b783e68f103f9bef8e0eeb90d0","sha512":"41d8e907b19f5f624744dd58d4e85e2eb8d34f830ae436b1924b1f096e650e9d29e58f1439d2188106110ab59b0dd544967cabe51184c6500217afce24f7fd43","ssdeep":"","tlshash":"4be07da8fa9d942bc4e435f288fe13ac28f218833cc4d9c01066cc90a515636f04fcec","size":334,"data":"","first_seen":"2023-03-10T10:25:05Z","last_seen":"2026-05-22T06:17:01.684775Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/ulightbox/ulightbox.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9605bcdc6ee228b932dd6b1b5153ac42","sha1":"dd731517ec7aa2c70fc2e2285578ff8d8960c910","sha256":"f9b8698e1a1048e2b7797ec38ab7471666acd5df07ea358fd17f233d69700f77","sha512":"bb0a1e93dc918d5bcc5c03686f94c947836e0d043cce33e6706645cfac015e9f8ae2f2ee78941d531a68d830a239634fdfe7777e8d0e9fbcf5a2451bfeb7b331","ssdeep":"384:BEpueQ7geU408zL09WlhIKyE9qtyxTK9s+TRjTC67N/EX6BvSek3jGnnR:BEpE7gw08X09Wlqn0+TRjTHWavSekCnR","tlshash":"64a21904b2147db781b725a9508f601c62379d27d70385a9f13ce8e949e4bc8367beee","size":23079,"data":"","first_seen":"2025-07-20T23:41:45.137989Z","last_seen":"2026-07-24T07:04:31.09497Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/uwnd.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf39e6b41692244beffa65fbddff09c2","sha1":"dce18b5fdaa1c7c2042c9de987e6fbe034f5edc6","sha256":"5e788b6c3bb6e3016ab39575ce04fc402af7772ed7c656d2ad12adc970677be3","sha512":"f335978f494042241a516a86030fe88d217ded47c3957515ca055528e1f9c7641ddc31ad3e43850e54fc70026d06fe803225c4b6d041cb12906e9be74df79158","ssdeep":"6144:kcgHEPHmnqkIU6HHQ+GE1fheWpqQr2FFB1fZTk75infBxSjY6:RgHEPHmq/U6HH7ZoFs+Aj1","tlshash":"27243beeb1b1316603e251a1801f56867177a91ea905406cb63ddced2ee8e8530bff3d","size":212645,"data":"","first_seen":"2026-04-28T01:22:57.501284Z","last_seen":"2026-07-24T07:04:31.098252Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/jquery-1.12.4.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-26T06:25:01.580072Z","times_seen":83419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddb502fb15e74f46453f1e534d3a2f76","sha1":"d00b62c0d50a886c0872a0a8cfbdc3c1ed8b6d72","sha256":"643f30fe084aa7dd2e8ce09b0afd7fe4e12998f3be588f7b82ff7c205f624c74","sha512":"f6ec0d4d2c06865c88427b9a6020fa6cd09520388e567dd85a1a7d24808fb9bfd2b425014a784921d3d4ac11c2bcf2c94d8f73be3a3cb2017305630595984476","ssdeep":"","tlshash":"833183d99bc8f52b96d543535807a6745c7de28e3f00954338c84aad99c9e1e334e374","size":1585,"data":"","first_seen":"2026-05-22T06:17:01.687467Z","last_seen":"2026-05-22T06:17:01.687467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a59e15dc74819823265a12fdb095a169","sha1":"6d7b3a65bc9990c97009115f13bcd9a67c568c9c","sha256":"de083b96a5f40daa67b3474e1a9a829240fd3c36fc0d329ecba49bb037404f25","sha512":"df89179d5c5827212d4a3a18fe76ba238e7fdc7ba16e7ed15031991f61c02397576bef6faf4c3fb514a4916ef241ec98837c31f0ad16a2f114345f121f8080b2","ssdeep":"","tlshash":"9ee02c023bac0831d2aa1a2f123212c87aacc07aa800581abcc8c60c82e4c8c4726498","size":326,"data":"","first_seen":"2023-03-07T12:06:21Z","last_seen":"2026-06-07T04:09:37.345251Z","times_seen":657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/t/1062/template.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"19cdf66f0559cf3cdb54101ca624a57c","sha1":"5ce625f4f54cfbb190a019c00f2f7a909f1dab8e","sha256":"2d222010fe427f831afa21b09a737e95c8650f3e49683c564abcbe157fe87931","sha512":"9a549198ef4aa310aa5036cc76b48636af0fa0552b1e3a85cf554538d6517188ceae0c21e3d51eaca1ae4f5d689466f04ca14ae593061a6cdf22399d4489840a","ssdeep":"768:ZcR8ircjGdqCVSDOSkHssmhqYwkWlDZmB2hFwCqvN2lYd4QnDWI+W4iWEZ2IIi:JNkHbmhtJaosIIi","tlshash":"7423210dbbe225349317f1699eaf9409b236545f524acd0d3a4c91e44fa243887baffc","size":47277,"data":"","first_seen":"2023-03-10T19:36:46Z","last_seen":"2026-05-22T06:17:01.673992Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bro.freebasicpro.xyz/code/mizweojtg45ha3ddf42dsnbx","fqdn":"bro.freebasicpro.xyz","domain":"freebasicpro.xyz","tld":"xyz"},"ip":{"addr":"174.138.7.87","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f495e69f2e9edc75eeae7dd3ea78a747","sha1":"a89e38bbe70fa2de5db9d578975abd4e9dcda52e","sha256":"8bf4c7cf443426b4cd8b5a56d22109b4e70314c1d2b8d0eb68887696722c132c","sha512":"3fd0afcb046ea60710b769bab0a70d6474af6fc6e881277b0b17964c74cb7edb539a758f4b87a689ce9a52a20674cc88fa8cb9c2a337785cd060d8a5bdefa85e","ssdeep":"","tlshash":"1e5000c000003003300003000f00c00000000c00003000000000000000000c00c00000","size":10,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-07-24T12:25:25.412295Z","times_seen":3726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bro.freebasicpro.xyz/code/mizweojtg45ha3ddf42dsnbx","fqdn":"bro.freebasicpro.xyz","domain":"freebasicpro.xyz","tld":"xyz"},"ip":{"addr":"174.138.7.87","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bro.freebasicpro.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 19:16:29 GMT","end":"Thu, 30 Jul 2026 19:16:28 GMT"},"fingerprint":{"sha1":"5B:C4:7A:46:D0:5E:A4:AC:E8:37:EB:08:7E:05:E4:74:DE:24:27:0F","sha256":"AA:87:8B:05:49:80:7B:61:14:7C:A0:1F:59:67:12:75:CF:3A:FD:37:AA:AE:32:C7:9E:C8:23:0D:FD:6A:93:07"}}},"request":{"raw":"GET /code/mizweojtg45ha3ddf42dsnbx HTTP/1.1\r\nHost: bro.freebasicpro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 22 May 2026 06:16:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: uuid=20073847-646a-4a43-9f1f-b9cd2c9ce0ef; expires=Sun, 21-Jun-2026 06:16:34 GMT; Max-Age=2592000; path=/; SameSite=None; domain=bro.freebasicpro.xyz; secure\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: img-src https: data:; upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f495e69f2e9edc75eeae7dd3ea78a747","sha1":"a89e38bbe70fa2de5db9d578975abd4e9dcda52e","sha256":"8bf4c7cf443426b4cd8b5a56d22109b4e70314c1d2b8d0eb68887696722c132c","sha512":"3fd0afcb046ea60710b769bab0a70d6474af6fc6e881277b0b17964c74cb7edb539a758f4b87a689ce9a52a20674cc88fa8cb9c2a337785cd060d8a5bdefa85e","ssdeep":"","tlshash":"1e5000c000003003300003000f00c00000000c00003000000000000000000c00c00000","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-07-24T12:25:25.412295Z","times_seen":3726,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":102,"dns":34,"connect":21,"send":0,"wait":26,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"bro.freebasicpro.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/css/1062.css","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/css/1062.css HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:57:48 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86d9c-81c2\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (417)","md5":"2b11006243e722af91db4b334ac604da","sha1":"6f7526863c730131419e9a51aa8f45122bd12dc2","sha256":"0dc232f9414e8ce8cca04ceaafc624257ddb143d0575298a2745fce9a960943b","sha512":"5b2557c28418c9fe2f3c70e2f25320880c2cdae26a83368f232f78bd3c20d689d7d9014ddbe0ef3a79e056e3c019d4d0e323f97b5c4d31e981042755f535b3be","ssdeep":"384:jmh8KiQSbBT2Q0UHLnTrWTWnKaZi+cep++lhEyAMOLaw5BtR1pCQHR0w2dCRfnvt:Sh85KqK5o++DEyAMOL9zBHfuCRobA","tlshash":"1fe2b832f619212cf22fc427f81267f976291037e6232df5e6a4f974db4a4e91631a4c","first_seen":"2026-05-22T06:17:01.639151Z","last_seen":"2026-05-22T06:17:01.639151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":33,"dns":1,"connect":17,"send":0,"wait":18,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/ulightbox/ulightbox.min.css","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/ulightbox/ulightbox.min.css HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:58:05 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86dad-11c8\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4552), with no line terminators","md5":"a05316c4712b56d4de87d83d57fc9a74","sha1":"22db34df3400db68355d8b3e06c01c4f964ad484","sha256":"5ddb669cd05d5c481a798631d2bd02b041950600ebaa4d419833fe0f01a04955","sha512":"d0801e7187ffaaefa81a71a43e4f70be03a2accb39272e8b62409c4f876be38d13f1e59a4be502df89e09af2cba993d519c8402766425dc31f72abdb7a675957","ssdeep":"48:Mnd32ya+m5MQvUs3pf0iDq6FEHIiJPaLuuFSQ42GBAsr+AZ5MQj5MSM:/yLMMds3pf0iDqaEHIiJPJpBUwMQ1MH","tlshash":"c791125364443159d577de30d29f8eccb0318482a5632abfa62cfeb287c57c981fa9e4","first_seen":"2023-04-05T13:59:34Z","last_seen":"2026-07-24T07:04:31.078182Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":40,"dns":1,"connect":24,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/ulightbox/ulightbox.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/ulightbox/ulightbox.min.js HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:58:05 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86dad-5a27\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23079,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23079), with no line terminators","md5":"9605bcdc6ee228b932dd6b1b5153ac42","sha1":"dd731517ec7aa2c70fc2e2285578ff8d8960c910","sha256":"f9b8698e1a1048e2b7797ec38ab7471666acd5df07ea358fd17f233d69700f77","sha512":"bb0a1e93dc918d5bcc5c03686f94c947836e0d043cce33e6706645cfac015e9f8ae2f2ee78941d531a68d830a239634fdfe7777e8d0e9fbcf5a2451bfeb7b331","ssdeep":"384:BEpueQ7geU408zL09WlhIKyE9qtyxTK9s+TRjTC67N/EX6BvSek3jGnnR:BEpE7gw08X09Wlqn0+TRjTHWavSekCnR","tlshash":"64a21904b2147db781b725a9508f601c62379d27d70385a9f13ce8e949e4bc8367beee","first_seen":"2025-07-20T23:41:45.137989Z","last_seen":"2026-07-24T07:04:31.09497Z","times_seen":502,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/t/1062/mac-b.png","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/t/1062/mac-b.png HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/.s/src/css/1062.css\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 53086\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Tue, 16 Dec 2014 13:09:00 GMT\r\nETag: \"54902eec-cf5e\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 637 x 336, 8-bit/color RGBA, non-interlaced","md5":"9764a7254fb6a43cacf40247ebcc24b6","sha1":"a329ca41a13b80f61aef39907f91e23b9e2c5401","sha256":"0605c1f2f08c41113cbab6a1369adfbab316a3ec88f6f5975ed19be6de9c7c0d","sha512":"ee10762b307e7484cd3b398c2d2789b3f1c0c033aa55937ac4565b866637468eb42de09d75046b19a3a0dab63d16516f6ea00311f15876515bb9b3676f557328","ssdeep":"768:kyIXpV2ttQQ7TjpAHoEFmvgz3zICmppJpuHxc6SdoCyEvivsZouVC2j+/gy/uH0Q:kyIXpVyQQ7TiBRzjaCcolEZpYJM0nls3","tlshash":"6c33f1c382864580d5ec0046a7f4141ad301e6e23df9fee1beca794b84d58f5e9364ab","first_seen":"2024-08-20T15:24:52.747037Z","last_seen":"2026-05-22T06:17:01.647285Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T06:16:33.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nPragma: no-cache\r\nVary: Accept-Encoding, host\r\nSet-Cookie: eemsprouCoz=; path=/; expires=Wed, 22-May-2024 06:16:34 GMT; Secure; HttpOnly; domain=.emspro.ucoz.net\neemsprosi=AQDC9A9q; path=/; expires=Sat, 22-May-2027 06:16:34 GMT; Secure; domain=.emspro.ucoz.net\neemsprouzll=1779430594; path=/; expires=Sat, 22-May-2027 06:16:34 GMT; Secure; domain=.emspro.ucoz.net\neemspropushi=1; path=/; expires=Sat, 23-May-2026 05:16:34 GMT; Secure\r\nLast-Modified: Sat, 26 Apr 2014 14:55:52 GMT\r\nCache-Control: no-cache,no-store, private\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}],"data":{"size":16689,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (897)","md5":"93fd6b042450ee484e57b4899938ce3e","sha1":"dbabce3d7c8816ace70ba12f3f51dc7892568d65","sha256":"2f5edde62a30c668be6ae3421c31a8e01636eb56731a5bcb5d7524615b17500c","sha512":"55bcc2710d1d9b25be5dc275346e33631169e5d938d30e1984a8332eb859fe1531c829ad487044991d16b4597539661b2d383910db0b97f0fe8772cf714e58ad","ssdeep":"384:UZuLJWzhdVmQ8J1C3PxP5i8OhU9DxmVuVU:UZuLJWzRmQ8J1C3PxPY8OhScsi","tlshash":"697219229f4c413b0093426178315f5bb7bade79db4758a160b4816c6bc4f8fef262d9","first_seen":"2026-05-22T06:17:01.651504Z","last_seen":"2026-05-22T06:17:01.651504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":70,"dns":26,"connect":17,"send":0,"wait":74,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/?XQLFtlAVjf%5EEASCzt8FkpxHp%3Bg%3BKx1pfWp1Uw0Z7KGNcueN6wGc4vcJzeeq6JEVL18fpQCaz4XZ1bfUeVdvxNq0tOMC2%5EuuxcGNZUBhcY%21%5EMdsOf8vfiHXiAYeHf%21T2kj3b36ULaTiKz%21ApR%3BsZ1xWvNjkZiVCCdimj2%5EIbKtML03nm%21MX%215O1Pq%21L5jT5nhGFIrI22gCFTilp0OWWSlpz8nhLglE%3Boo","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /?XQLFtlAVjf%5EEASCzt8FkpxHp%3Bg%3BKx1pfWp1Uw0Z7KGNcueN6wGc4vcJzeeq6JEVL18fpQCaz4XZ1bfUeVdvxNq0tOMC2%5EuuxcGNZUBhcY%21%5EMdsOf8vfiHXiAYeHf%21T2kj3b36ULaTiKz%21ApR%3BsZ1xWvNjkZiVCCdimj2%5EIbKtML03nm%21MX%215O1Pq%21L5jT5nhGFIrI22gCFTilp0OWWSlpz8nhLglE%3Boo HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nVary: Accept-Encoding\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, private\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":867,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"6accc1e1c5b715beb46216b916bcfda5","sha1":"8c50d262439e483aa2c76fe739a601592491b3f0","sha256":"05f7cff0b84ea3f505f6afcd068fd2ea84ac7a1616e29255e6ad206cdddab97f","sha512":"3dd9e7b1a28fd45a92204c2b2d25178d7bbe8e0dd6552fb110b9a21ec20213371534fb6891438ae63bff377709698d9a12a9f831f9e910a2a231c922ccb4e868","ssdeep":"","tlshash":"fb11afe8bf5e1925852424a6742653fc247ce8313900a91bfc88f52da0c0f6c566f82c","first_seen":"2026-03-16T22:23:59.820507Z","last_seen":"2026-07-12T13:57:18.954188Z","times_seen":38,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/base.min.css","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/base.min.css HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:57:43 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86d97-95a9\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38313), with no line terminators","md5":"e037318e3dcabf73d2fbadde27886db3","sha1":"a509fc3fd6f2a63daba550b82b9819f3d5e630f5","sha256":"6cf9c61c9865ef55f51015edad71b1178d9ec14b6a2f816b9b13c04fdf6a0dc5","sha512":"5282a4611de2e2a7c4900dce988162874fa3fd1e65902cd7fbcf916bd145edd97f4c0d02c42fff636ec84c6104ea9496a426635d05ed3b2571d3fbacb9676435","ssdeep":"768:6Ciub082XWu7YV82nBZkiTbrXhGCZ5pz82Jm:1iuL2m1nBZkMZGCZ5f4","tlshash":"5503e7626668725db53bc269acd1578e722ad020f7c723eef861b335c9cf0c50a75b18","first_seen":"2026-02-12T12:00:26.557331Z","last_seen":"2026-07-24T07:04:31.094436Z","times_seen":277,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":40,"dns":1,"connect":19,"send":0,"wait":19,"receive":3,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/jquery-1.12.4.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/jquery-1.12.4.min.js HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:57:44 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86d98-17b8b\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-26T06:25:01.580072Z","times_seen":83419,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":42,"dns":0,"connect":18,"send":0,"wait":23,"receive":22,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/social.css","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/social.css HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:57:44 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86d98-c73\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3187,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c362ef6ec18fcdc24c3c32b59efbfae6","sha1":"5b0d4df5e4f5c4cb2d8e3400436fe73aceca3a05","sha256":"d185d2cc35bd37f496d10c55d2a5952f141af26841df75f5043663ae505c3dff","sha512":"bab549a781add68d59201ac2f2e5eedf4e2e1d9fde9ebf027c05d505be5e90143377e8ac267cee6128029fd5c5c43c185e7459a034cc01c91f55538255b20d42","ssdeep":"","tlshash":"99610240557ec81a6653a0dd1a74aa06311db7e1dec98f2c257450a50bffb6c28ff3b2","first_seen":"2025-04-11T16:05:08.631547Z","last_seen":"2026-07-24T07:04:31.083892Z","times_seen":516,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/EMSLogo2.png","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /EMSLogo2.png HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 9069\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Sun, 27 Apr 2014 14:30:15 GMT\r\nETag: \"535d1477-236d\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 32, 8-bit/color RGBA, non-interlaced","md5":"7c45e48a21dc1a046d0c0b21557959bf","sha1":"4accb3cfabe024001fe1d19ec114560a9ac1949b","sha256":"a2001e79cd5b706aeb1fca02c7e1ce354e578a84a21550e9b89e4397d0ab1fad","sha512":"ce3acf2eeb002b67912042c3b0802fd5710fc8cddd235f14327337001a5bb9df40c72b659757f3ea2bc41db0387f8611f7dbed7071ca757dc7a53c14eaabcf11","ssdeep":"192:me5kzP7py4vkbnd2fxObGZjOHUNk7N3pZoVo9Sk6:me5Sdw2wyxOHUoBpyxk6","tlshash":"3312bf29249beb43cce67042eeca83a4564ddb3dbdc8b9f4fe07e042149504b4695da1","first_seen":"2026-05-22T06:17:01.661005Z","last_seen":"2026-05-22T06:17:01.661005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300italic,400\u0026subset=latin,cyrillic,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css?family=Open+Sans:300italic,400\u0026subset=latin,cyrillic,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 22 May 2026 06:16:34 GMT\r\ndate: Fri, 22 May 2026 06:16:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11967,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3e66e0ec716b95cada88a2acd6f3159b","sha1":"0912b873840d99d51bd1e53f235696e9db425a38","sha256":"f70c1a5a1ab6c032a36e13b52d88e97f4e3e48d79ae7297d842caa39f1d027ed","sha512":"7b69ab1ed7ec7cbfeb90083e437ad0a4422458c746537e8e7c3c14209cf89f2abbfe97af7f8e19017c13b75fe6afc98bb273c96ec942c7ce64faa4534d92038c","ssdeep":"192:+lpOlAl/lg5lslRqvl0bqGIwV49ltlUolg9AWjBF1INqbCbqGIwV4Rzlqx:+3Ou5uWqvOqY49T7CVJqqY4I","tlshash":"ae321e910417504066431de233df7e30de4fa2606084d076abfe9b9beed6daa627436d","first_seen":"2025-10-29T20:36:29.835876Z","last_seen":"2026-06-25T17:05:14.890037Z","times_seen":8,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.co.za/","fqdn":"emspro.co.za","domain":"emspro.co.za","tld":"co.za"},"ip":{"addr":"196.41.123.211","port":443,"asn":36874,"as":"Cybersmart","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T06:16:33.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.emspro.co.za","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 20:32:35 GMT","end":"Thu, 02 Jul 2026 20:32:34 GMT"},"fingerprint":{"sha1":"F4:AC:BE:D4:4E:79:7C:3D:47:62:36:34:B2:0F:33:00:DF:AB:F1:85","sha256":"35:97:4F:0C:F8:F9:4B:6C:2E:3A:4E:7C:0C:7B:01:56:C1:13:2E:50:8D:B0:E2:00:31:A5:58:FA:54:26:8E:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emspro.co.za\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 22 May 2026 06:16:33 GMT\r\nServer: Apache\r\nLocation: http://emspro.ucoz.net/\r\nContent-Length: 247\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16689,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":352,"dns":28,"connect":159,"send":0,"wait":164,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"emspro.co.za","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"emspro.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"emspro.co.za","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/layer7.min.css?v=131449","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/layer7.min.css?v=131449 HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Wed, 13 May 2026 13:49:03 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a04814f-871d\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34589), with no line terminators","md5":"f8f2d8ba39385ed6a630227917c3d67e","sha1":"b279594ffe91c2b721198d9d6b4cd03974d3a641","sha256":"62171ebb507cc63cbed49a42b2aa3aeca27f41d8f0aa4f1e5102558851070a02","sha512":"482ae2d4718af340bbd3aa8b0915f42cc1d8d1ecffea7f43800ac5ec249b431539fbea9177f4ec3f80ad29a5973bd461efc9bb94e767a554af0699962e6e6cfa","ssdeep":"768:nduZ32+JpR4okaosXljlaVKJb0PGxnubBSFT/O7KfBM+e:duZ32wpR4okaoseKJb0PGxnubBDGfBm","tlshash":"23f23a72fed84029791bc567a055b7de321af262e7d20ba8f14e7874cdc60862a3374d","first_seen":"2026-05-13T21:51:58.667363Z","last_seen":"2026-06-01T22:56:17.676175Z","times_seen":22,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":45,"dns":1,"connect":18,"send":0,"wait":19,"receive":3,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk5hkWVAewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/opensans/v44/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk5hkWVAewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://emspro.ucoz.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 May 2026 13:30:13 GMT\r\nexpires: Wed, 19 May 2027 13:30:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233181\r\nlast-modified: Mon, 15 Sep 2025 16:31:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19292, version 1.0","md5":"0c72d6b1667be2aa86be58011f87c859","sha1":"97ab6ffe0ded32b42f98d691c8b16de0e6b39fcd","sha256":"89d2990c4d23780ec1bd20e85436cb0de7cb6e42a8d5b5aa83f2c41c48be4063","sha512":"bca29b6b6b7eaa10ba2b5d0a42a817cef5bfe94860f004ca909aaffd9d694bafdacb12434fd0efa85cf1245ed393db391ce5ff33ec4ddb6e5d2f9162fc278fbc","ssdeep":"384:gPJl3WnZJTG1+qLxKyPDhkr1D28QgAnPGEXk+kYXmOvWWViK:gxUZJTG11K81ikNk+hRR","tlshash":"3782d0e6b406781cac5bc02fc1b9d8512ff01385d41327e9ba185b5d016a81e3f7ce5e","first_seen":"2025-09-17T19:43:44.040238Z","last_seen":"2026-07-22T15:45:32.770452Z","times_seen":355,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":68,"dns":1,"connect":8,"send":0,"wait":10,"receive":3,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/favicon.ico","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 9774\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Sun, 27 Apr 2014 10:42:19 GMT\r\nETag: \"535cdf0b-262e\"\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9774,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 32x32, 8 bits/pixel, 32x32, 32 bits/pixel","md5":"e02e9569feb297a9d3e0dedafd9001c7","sha1":"3a4451cec7da29f6a9bcb1a68a29f91cf99ceb43","sha256":"a4c5cdb6fb748b8ee182a95fdbe50966f16e9a40da24e1c4ba05149d8b9ed310","sha512":"3ad0ed70a437b653a4a956f08f7afb35992841c1bbd870734439194bed1a6954003d283809304e3d5f797222e096e80794722ceae5cd24912aaa33bcef2dfbdb","ssdeep":"192:Ox8egsdLefBge+rljSeXkVBOT+V9GrZ7ijyz:Ox8V033RjSeXkPtV1e","tlshash":"69121952bf0a7989fd962c3ab02fca3333590d12057197bb6de17e173a350918819cea","first_seen":"2026-05-22T06:17:01.671688Z","last_seen":"2026-05-22T06:17:01.671688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/t/1062/template.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/t/1062/template.min.js HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Tue, 16 Dec 2014 14:01:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"54903b1c-b8ad\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47277,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (394)","md5":"19cdf66f0559cf3cdb54101ca624a57c","sha1":"5ce625f4f54cfbb190a019c00f2f7a909f1dab8e","sha256":"2d222010fe427f831afa21b09a737e95c8650f3e49683c564abcbe157fe87931","sha512":"9a549198ef4aa310aa5036cc76b48636af0fa0552b1e3a85cf554538d6517188ceae0c21e3d51eaca1ae4f5d689466f04ca14ae593061a6cdf22399d4489840a","ssdeep":"768:ZcR8ircjGdqCVSDOSkHssmhqYwkWlDZmB2hFwCqvN2lYd4QnDWI+W4iWEZ2IIi:JNkHbmhtJaosIIi","tlshash":"7423210dbbe225349317f1699eaf9409b236545f524acd0d3a4c91e44fa243887baffc","first_seen":"2023-03-10T19:36:46Z","last_seen":"2026-05-22T06:17:01.673992Z","times_seen":8,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/.s/src/uwnd.min.js","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /.s/src/uwnd.min.js HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Mon, 04 May 2026 09:57:45 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69f86d99-33ea5\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Robots-Tag: googlebot: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cf39e6b41692244beffa65fbddff09c2","sha1":"dce18b5fdaa1c7c2042c9de987e6fbe034f5edc6","sha256":"5e788b6c3bb6e3016ab39575ce04fc402af7772ed7c656d2ad12adc970677be3","sha512":"f335978f494042241a516a86030fe88d217ded47c3957515ca055528e1f9c7641ddc31ad3e43850e54fc70026d06fe803225c4b6d041cb12906e9be74df79158","ssdeep":"6144:kcgHEPHmnqkIU6HHQ+GE1fheWpqQr2FFB1fZTk75infBxSjY6:RgHEPHmq/U6HH7ZoFs+Aj1","tlshash":"27243beeb1b1316603e251a1801f56867177a91ea905406cb63ddced2ee8e8530bff3d","first_seen":"2026-04-28T01:22:57.501284Z","last_seen":"2026-07-24T07:04:31.098252Z","times_seen":161,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":20,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emspro.ucoz.net/emspro_home.jpg","fqdn":"emspro.ucoz.net","domain":"ucoz.net","tld":"net"},"ip":{"addr":"88.211.243.182","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emspro.ucoz.net/","date":"2026-05-22T06:16:34.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ucoz.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Thu, 07 May 2026 00:00:00 GMT","end":"Sat, 21 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:1C:B7:10:23:2F:58:8E:0A:46:D7:BA:0F:27:D7:77:17:51:F6:6F","sha256":"7B:21:CB:80:BE:B1:F8:2D:E1:7D:1C:11:5E:7F:B0:8B:0A:D7:C9:CA:8A:34:AC:E7:35:7E:85:02:C7:08:FB:8D"}}},"request":{"raw":"GET /emspro_home.jpg HTTP/1.1\r\nHost: emspro.ucoz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emspro.ucoz.net/\r\nCookie: eemsprosi=AQDC9A9q; eemsprouzll=1779430594; eemspropushi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 06:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44279\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Sun, 27 Apr 2014 10:22:11 GMT\r\nETag: \"535cda53-acf7\"\r\nExpires: Thu, 11 Jun 2026 06:16:34 GMT\r\nCache-Control: max-age=1728000\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44279,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x270, components 3","md5":"3a64163523431315d34a19d5e569bd67","sha1":"ac4b1d94e949d6e98cd99c590294bc09fcfa1a55","sha256":"dca8f43b4e8340f8a6516bc2718a7b9d71a4326625331da3fadab7e5527d099b","sha512":"612464cbd0bd01b44e0b1d910cd40cc9a8af168473e0b17879c3210ec24cc9a3e98d31818874d4fc6a78fbea5fa00d2e6552eec633f9d35090a2c1f5e5f5ebda","ssdeep":"768:X9xVtS3xzJJkWaVEaW0to39xx2g3th7tTgFwetckwwqElU5KVeddN9c894Ijx3aZ:XHnS3ZJJ7YOdxth7t0meOkwDElU5KkjO","tlshash":"8913d112b74814a2bcbc94ab5e8d460d97014859b3e3f56ba33a6fc67bc8741f902f74","first_seen":"2026-05-22T06:17:01.67845Z","last_seen":"2026-05-22T06:17:01.67845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}