200 OK 15 kB URL User Request GET HTTP/1.1 IP
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (2749)
Hash 639daff8c743d33c32f072975e870b13
0fe6f8a31cb7406d9e0db653872fe3d35c094208
a02593100a57837eb353b68df59cab2e47377e6699b1888e09fea375100cad3f
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 0pskovmuzmouCoz=; path=/; expires=Fri, 28-May-2021 21:57:04 GMT; Secure; HttpOnly; domain=.pskovmuzmo.ucoz.ru
0pskovmuzmouzll=1685311024; path=/; expires=Mon, 27-May-2024 21:57:04 GMT; Secure; domain=.pskovmuzmo.ucoz.ru
0pskovmuzmouCoz=; path=/; expires=Fri, 28-May-2021 21:57:04 GMT; Secure; HttpOnly; domain=.pskovmuzmo.ucoz.ru
0pskovmuzmopushi=1; path=/; expires=Mon, 29-May-2023 20:57:04 GMT; Secure
Pragma: no-cache
Vary: host
Last-Modified: Sun, 28 May 2023 21:56:57 GMT
Cache-Control: no-cache,no-store, private
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/?O7fjET0cY%3BSsyrkHs%5E6dnOPPl%5EbFLbPkiAkGGnydt4ngqE5VwxPfqyV1dM2fB64OrIaOsr2JCmJapkeX6sYuzZv%21%21Of7EnEdbuBsQ0NKAKEOBZ14TCdhQRRn55731VtW04LkkelS26bH8r8E%5Estdvl64%21%3B0OE%5EYcJyIGE6%21KNP6a1EndF6gP8IafrX4NJ2u3gpQhamvMVnm%21iqK%21jn0ZPHGFzUoo
200 OK 1.2 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/?O7fjET0cY%3BSsyrkHs%5E6dnOPPl%5EbFLbPkiAkGGnydt4ngqE5VwxPfqyV1dM2fB64OrIaOsr2JCmJapkeX6sYuzZv%21%21Of7EnEdbuBsQ0NKAKEOBZ14TCdhQRRn55731VtW04LkkelS26bH8r8E%5Estdvl64%21%3B0OE%5EYcJyIGE6%21KNP6a1EndF6gP8IafrX4NJ2u3gpQhamvMVnm%21iqK%21jn0ZPHGFzUoo
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
Hash 0ecf2aaa0d06ab82b698b768e8101b1b
f3dd84a3a2773d330575bf25e97f5029b2253a8b
79c284b506d812563700f95e4cd97cee0abbb955a4dbf53a89f52bbb3d092588
Analyzer Verdict Alert fortinet Malware
GET /?O7fjET0cY%3BSsyrkHs%5E6dnOPPl%5EbFLbPkiAkGGnydt4ngqE5VwxPfqyV1dM2fB64OrIaOsr2JCmJapkeX6sYuzZv%21%21Of7EnEdbuBsQ0NKAKEOBZ14TCdhQRRn55731VtW04LkkelS26bH8r8E%5Estdvl64%21%3B0OE%5EYcJyIGE6%21KNP6a1EndF6gP8IafrX4NJ2u3gpQhamvMVnm%21iqK%21jn0ZPHGFzUoo HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:04 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
pskovmuzmo.ucoz.ru/.s/src/layer7.min.css
200 OK 7.1 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/layer7.min.css
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (25643), with no line terminators
Hash 1b8192322bc6abc4477ded3a2597f3de
12c0c4cff7f405974ddac5efa5d9286e42232a74
10a7bfa61deeb28792aa4b8635021f563eed768537d2f713cc38a654abb534ec
GET /.s/src/layer7.min.css HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:04 GMT
Content-Type: text/css
Last-Modified: Fri, 28 Apr 2023 09:06:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"644b8ca5-642b"
Expires: Sat, 17 Jun 2023 21:57:04 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
472 B IP
Hash bb494db5b5848c5e9833175a6e79f275
41f078137666d7c7312fcbbe7df7a26fb2237c33
86d97acae9b59a15104dfcab27a4d525f351caea4995ef305566b1ae558743e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news.2xclick.ru/loader.js
200 OK 34 kB URL GET HTTP/2 news.2xclick.ru/loader.js
IP
ASN #48347 JSC Mediasoft ekspert
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectgnezdo.news
FingerprintA3:21:AA:ED:4A:24:33:43:6D:ED:DF:B7:52:B6:50:DD:C0:00:92:07
ValidityFri, 28 Apr 2023 04:59:31 GMT - Thu, 27 Jul 2023 04:59:30 GMT
File type Unicode text, UTF-8 text, with very long lines (1902)
Hash 6c54383a9e805681a2ec41bee246c5ff
66eec92651056823deb0b94521ea0574e7ec8fdd
84dc980268f984769ffc3049d88417722db93d1ce9a58f3f0bc354bba98dbc42
GET /loader.js HTTP/1.1
Host: news.2xclick.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 28 May 2023 21:57:11 GMT
content-type: application/javascript
content-length: 33553
last-modified: Tue, 23 May 2023 08:00:16 GMT
etag: "646c7290-8311"
content-encoding: gzip
expires: Mon, 29 May 2023 21:57:11 GMT
cache-control: max-age=86400
access-control-allow-origin: *
set-cookie: uid=XV9n6WRzzjckP9CUA1KZAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; secure; SameSite=none
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
pskovmuzmo.ucoz.ru/?5NY%3BW3uNmMkDcFEEJVi%3BUv78OTpmwLFD5jV2PFrxl2deQ9BPwsdJwEKzycODiIh6TszPQFyd%3BjRLR9pgfQZMz5c04EMPp6m7RE1Dyxl%3BI6kjfaKEZbePK1xj%21KEMXNmMqPMp8jbPvgv%3BYpcr573zYmX1TK15%3B2QHmuCysfcl8ZNMmMlAbch90Ng92kqzTw5Z9Lhj4fp1mzMsFc0nEQr%21zwCDjC%21YF%3Boo
200 OK 834 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/?5NY%3BW3uNmMkDcFEEJVi%3BUv78OTpmwLFD5jV2PFrxl2deQ9BPwsdJwEKzycODiIh6TszPQFyd%3BjRLR9pgfQZMz5c04EMPp6m7RE1Dyxl%3BI6kjfaKEZbePK1xj%21KEMXNmMqPMp8jbPvgv%3BYpcr573zYmX1TK15%3B2QHmuCysfcl8ZNMmMlAbch90Ng92kqzTw5Z9Lhj4fp1mzMsFc0nEQr%21zwCDjC%21YF%3Boo
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
Hash 51e142a0b55c4d1f5056ff08fc046c09
24fab84fa4215afdb8ee7555ec3d3b52e323f998
b36d8b4a6ae0a89de7676de2f7870c67cec1f19e98962b29344aa9291b9131cb
Analyzer Verdict Alert fortinet Malware
GET /?5NY%3BW3uNmMkDcFEEJVi%3BUv78OTpmwLFD5jV2PFrxl2deQ9BPwsdJwEKzycODiIh6TszPQFyd%3BjRLR9pgfQZMz5c04EMPp6m7RE1Dyxl%3BI6kjfaKEZbePK1xj%21KEMXNmMqPMp8jbPvgv%3BYpcr573zYmX1TK15%3B2QHmuCysfcl8ZNMmMlAbch90Ng92kqzTw5Z9Lhj4fp1mzMsFc0nEQr%21zwCDjC%21YF%3Boo HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
200 OK 578 B URL GET HTTP/2 www.google.com/recaptcha/api.js?onload=reCallback&render=explicit&hl=ru
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D
ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT
File type ASCII text, with very long lines (905), with no line terminators
Hash 172fa42e947743a487013dd91edcd312
d7b6b601119f9445485daa1b3803f0fd60dc006f
2c90d4cd69c451b89443040c4dc943af62ac6f22795078a3a7b8aabd918b90cb
GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Sun, 28 May 2023 21:57:11 GMT
date: Sun, 28 May 2023 21:57:11 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 578
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pskovmuzmo.ucoz.ru/.s/src/css/291.css
200 OK 3.5 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/css/291.css
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type assembler source, ASCII text
Hash 0b7fbffff191387bce05747522748873
c29d9a358bdbdd8b19ce45c64632e7319405f45b
d6db4adb5b9e28436f1692221b861608854abcd3d2d705f8d6923656e5e312ea
GET /.s/src/css/291.css HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/css
Last-Modified: Wed, 05 Apr 2023 11:25:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"642d5a8c-3f46"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/.s/src/ulightbox/ulightbox.min.css
200 OK 1.4 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/ulightbox/ulightbox.min.css
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (4552), with no line terminators
Hash a05316c4712b56d4de87d83d57fc9a74
22db34df3400db68355d8b3e06c01c4f964ad484
5ddb669cd05d5c481a798631d2bd02b041950600ebaa4d419833fe0f01a04955
GET /.s/src/ulightbox/ulightbox.min.css HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/css
Last-Modified: Tue, 24 May 2022 12:36:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"628cd15d-11c8"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/.s/src/base.min.css
200 OK 6.2 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/base.min.css
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (24519), with no line terminators
Hash cfa5d689b5b2f45ea3e3cf33415da504
dd71774375b3808c4483688e68833113c6e2c236
55998c0419cad6f5f33925fa11a2a38fd7586d3a5c9315f279d2b42a310460d2
GET /.s/src/base.min.css HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/css
Last-Modified: Tue, 02 May 2023 08:55:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"6450cfed-5fc7"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
s31.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.702359624185469
200 OK 0 B URL GET HTTP/1.1 s31.ucoz.net/cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.702359624185469
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGoGetSSL
Subject*.ucoz.net
Fingerprint9C:9F:0E:28:57:CD:A6:DE:BC:89:EA:60:7A:68:97:BB:58:9F:C1:4A
ValidityWed, 15 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi/uutils.fcg?a=uSD&ca=2&ug=999&isp=0&r=0.702359624185469 HTTP/1.1
Host: s31.ucoz.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
pskovmuzmo.ucoz.ru/.s/src/social.css
200 OK 610 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/social.css
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (442)
Hash 917872d4bcfea5e238f1f02cef7a9596
84c5e7eb25c8d7b11639ea428a9fac50bab26f84
12c919cc8994233c2f67bdcf1185997781ccfe1ce3405308e31bfd33d260bd74
GET /.s/src/social.css HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/css
Last-Modified: Wed, 01 Dec 2021 11:13:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"61a758f3-9b8"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/.s/src/ulightbox/ulightbox.min.js
200 OK 7.7 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/ulightbox/ulightbox.min.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (22313), with no line terminators
Hash 862f093f507f858ee329c39576f1c041
f3da76f6d4071020bf9c82ddbcbb1ad95d74108f
a0c876daa26fa9e875abc22a4e88e310a20ea1fdb45451e4af22b907dbf22da8
Analyzer Verdict Alert fortinet Malware
GET /.s/src/ulightbox/ulightbox.min.js HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/javascript
Last-Modified: Wed, 05 Apr 2023 11:25:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"642d5a97-5729"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/.s/src/uwnd.min.js
200 OK 57 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/uwnd.min.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0e2dd07983ad50fa9205b6a9d24bc79f
8eafe02a75c83f60d40d1cee73e2770805e54a9e
8993dbc5102beb8dc4ebfef06873c26198d0f2913627399034816b16715336ad
Analyzer Verdict Alert fortinet Malware
GET /.s/src/uwnd.min.js HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:04 GMT
Content-Type: text/javascript
Last-Modified: Mon, 25 Apr 2022 10:32:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"626678ba-3334b"
Expires: Sat, 17 Jun 2023 21:57:04 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
olofmp3.ru/feelcm.jpg
200 OK 3.6 kB IP
ASN #201848 Trader soft LLC
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectolofmp3.ru
Fingerprint03:8F:02:3A:B1:3B:22:9A:41:7A:6F:9D:BC:EA:05:B6:F8:AE:32:A2
ValidityFri, 21 Apr 2023 21:52:13 GMT - Thu, 20 Jul 2023 21:52:12 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=Paint.NET v3.35], baseline, precision 8, 90x32, components 3\012- data
Hash c7d8c504f7875059c41cc1913b943832
fb69976360d98163f970a031bb697f826cb82a74
1fd9d46dcdb09b154814d94653273b37849d016923aa6d3c8087ea39a5ff5497
GET /feelcm.jpg HTTP/1.1
Host: olofmp3.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 28 May 2023 21:57:11 GMT
content-type: image/jpeg
content-length: 3615
last-modified: Tue, 04 Jan 2022 13:39:28 GMT
etag: "61d44e10-e1f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.calend.ru/img/export/informer_1.png
200 OK 4.5 kB URL GET HTTP/2 www.calend.ru/img/export/informer_1.png
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectcalend.ru
FingerprintBC:AB:55:42:57:4C:FD:1F:E2:37:39:35:49:33:2D:BF:4C:A4:A5:7A
ValiditySun, 30 Apr 2023 20:04:26 GMT - Sat, 29 Jul 2023 20:04:25 GMT
File type PNG image data, 150 x 257, 8-bit colormap, non-interlaced\012- data
Hash 63da89659792d68125c1b2a03b1d8968
5f2dced114848db77cbefd56c8292590facb9b89
7b4c845cfeb3aa0cd3293a931f69ae6efa2b95d170d7d1e12f9e90a341ba8f6a
GET /img/export/informer_1.png HTTP/1.1
Host: www.calend.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 28 May 2023 21:57:11 GMT
content-type: image/png
content-length: 4464
last-modified: Sun, 28 May 2023 21:01:11 GMT
etag: "6473c117-1170"
expires: Mon, 29 May 2023 21:57:11 GMT
cache-control: max-age=86400
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
1.4 kB URL ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 7e38c57ffa55eecfff7260e2c042c35d
fa2346c4c10305c5cc823a59c425365b25c719c6
9908ddedd0920c8b430bad34646b1b9aeeee7e51cfa87c80bb33574c9e732721
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 28 May 2023 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 01 Jun 2023 20:08:29 GMT
ETag: "fa2346c4c10305c5cc823a59c425365b25c719c6"
Last-Modified: Sun, 28 May 2023 20:08:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ce9c07cfa761c0a-OSL
pskovmuzmo.ucoz.ru/.s/src/jquery-1.12.4.min.js
200 OK 34 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/src/jquery-1.12.4.min.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
Analyzer Verdict Alert fortinet Malware
GET /.s/src/jquery-1.12.4.min.js HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/javascript
Last-Modified: Wed, 05 Apr 2023 11:24:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"642d5a85-17b8b"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/jquery.js
200 OK 68 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/jquery.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
Hash b54644e001018202e7861583c15ae16e
2f036d80ea16652fa72dfff9aa48964f17643695
8a86ff25a6f9231f24ac1a54450a8febed10b31663380baa067918b5a8befe8f
Analyzer Verdict Alert fortinet Malware
GET /jquery.js HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/javascript
Last-Modified: Sun, 27 Nov 2011 09:39:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"4ed20552-39fcd"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash 01306b55f5d6e6a8e1ff9411386a89a0
1c06c985114ad08023398fe3597371715cf6aa27
7d4df964819e827fdbd588784bff90bdb09b6938ca788e013144d1600e8ecc16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gosuslugi.ru/common/img/banners/banner_pgu_245x97.gif
200 OK 8.9 kB URL GET HTTP/1.1 gosuslugi.ru/common/img/banners/banner_pgu_245x97.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.gosuslugi.ru
Fingerprint9C:BD:FD:1C:4E:BD:4D:FC:14:04:4E:4C:1B:C1:1A:FE:81:12:20:EA
ValidityThu, 01 Dec 2022 14:42:29 GMT - Tue, 02 Jan 2024 14:42:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2099)
Hash 04c4cdd5ff20b10547e232a4718694f9
41cdae1174fd539cae69668be7caeff2848932c6
fd7c129e501e8ca4a3f67237055522f4a4cf234e91ed214af042f1fefc3db0ab
GET /common/img/banners/banner_pgu_245x97.gif HTTP/1.1
Host: gosuslugi.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:11 GMT
Content-Type: text/html
Content-Length: 8947
Connection: keep-alive
Keep-Alive: timeout=10
Last-Modified: Fri, 04 Mar 2022 21:27:53 GMT
ETag: "62228459-22f3"
Expires: Sun, 28 May 2023 21:57:10 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
Strict-Transport-Security: max-age=16070400
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
pskovmuzmo.ucoz.ru/dr.jpeg
200 OK 25 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/dr.jpeg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 487x350, components 3\012- data
Hash 8d5eaf2b2205f0e7411e1b7973856b2c
4f9beecbd0d296e586d5b3ddb768f84f3fcadec3
8dad92b93a62813420b1abea29769327f48c8c16ee1a22bbaf834749ba41063e
Analyzer Verdict Alert fortinet Malware
GET /dr.jpeg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/jpeg
Content-Length: 24871
Last-Modified: Mon, 05 Sep 2011 18:00:35 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4e650e43-6127"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/urok.gif
200 OK 2.2 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/urok.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 87 x 24\012- data
Hash b7c029c1262128c8c5125392d4cce803
c6d8cf2190e7fbdca166165f3e2f2440b3daf1f3
b16524d2ace89f155e91a690336b56cbcac38bd0b5fef363da794329e51e64e7
GET /urok.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 2186
Last-Modified: Thu, 13 Jan 2011 18:50:57 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4d2f4991-88a"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
1.4 kB URL ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 0087860989b5399cb9f1eaaf7d7b9f1a
a20cb1c0fbccba73cf0cf78dda92a3f387826943
d4330a85c6cc136f34e4f3749960ce943801071e70bee4a1243bb1a8f4a31abb
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 28 May 2023 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 01 Jun 2023 21:08:34 GMT
ETag: "a20cb1c0fbccba73cf0cf78dda92a3f387826943"
Last-Modified: Sun, 28 May 2023 21:08:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ce9c07debcc1c0a-OSL
pskovmuzmo.ucoz.ru/fon.png
200 OK 676 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/fon.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type PNG image data, 17 x 17, 8-bit/color RGB, non-interlaced\012- data
Hash 09e66a8019f05ca479deb2cadbe0b3c4
89f6956d446c973b94a32bf295979a0222b02fbd
dfa080a4be6852a4982e03d52b917e5d0b15f45b0b6f16ae9efbf0bde64e8eed
GET /fon.png HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/png
Content-Length: 676
Last-Modified: Fri, 23 Nov 2012 18:56:43 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "50afc6eb-2a4"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/fgos.png
200 OK 15 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/fgos.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type PNG image data, 242 x 103, 8-bit/color RGBA, non-interlaced\012- data
Hash 3f1ac868f546dce3fe15df11647647b1
56a430470c16560bcb47f086f831c93e1bedd62a
25f8b136cd8cfb04fee0b236203273ce3d9cdb3154c05c5bf55be2d47eda885c
GET /fgos.png HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/png
Content-Length: 15134
Last-Modified: Wed, 30 Mar 2011 14:09:11 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4d933987-3b1e"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/t/291/1.gif
200 OK 859 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/1.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 5 x 155\012- data
Hash a0848367e091941de0f73d96d601deb6
e6316c39bcca4383a08210607b5ed18e9dc584fd
93eca1935b273aaac0d9b9c4f2577df53b6228cecddd8267dab9686c028ec378
GET /.s/t/291/1.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 859
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-35b"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/t/291/2.jpg
200 OK 20 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/2.jpg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 489x155, components 3\012- data
Hash 457f79b59bf6332ebfdcc2510b2c6d2a
237f953a8860b666d3857528a7205cdc208bc364
173624b0b8095b828fb320505a0d7479a5e14127a8a8ec3e71d72cdf7a5edb8b
GET /.s/t/291/2.jpg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/jpeg
Content-Length: 19814
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-4d66"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/du2011.jpg
200 OK 76 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/du2011.jpg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 640x480, components 3\012- data
Hash f469b8dfae03ce3c088c21c77fce4bc9
49bd66853d38a7c5fcb6bc39c38de09cf2f3d1a9
05a29af1f655d80f5b0b1a048da8e9a878b56c936800046e07e796c797174a28
GET /du2011.jpg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/jpeg
Content-Length: 76294
Last-Modified: Fri, 30 Sep 2011 19:48:44 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4e861d1c-12a06"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
ocsp.sectigo.com/
472 B IP
Hash 7350a5ba9773f19b2cb072b4bc37ab2d
8b61c33cb8a1ec82d87e4be229ccff884dbad8c3
ceba68ef65d5f3855c23d71a0004853545e21e1691323d4ba3a395f6ec89f257
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 28 May 2023 21:57:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 26 May 2023 12:50:19 GMT
Expires: Fri, 02 Jun 2023 12:50:18 GMT
Etag: "8b61c33cb8a1ec82d87e4be229ccff884dbad8c3"
Cache-Control: max-age=398585,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ce9c07d58600b59-OSL
info.weather.yandex.net/pskov/2.ru.png
404 Not Found 153 B URL GET HTTP/1.1 info.weather.yandex.net/pskov/2.ru.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subjectp.ya.ru
FingerprintAD:FD:4F:CF:4C:AC:B0:F4:51:C0:86:79:30:BA:19:61:17:55:EB:FA
ValidityWed, 29 Mar 2023 21:01:26 GMT - Sun, 10 Sep 2023 20:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /pskov/2.ru.png HTTP/1.1
Host: info.weather.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Length: 153
Content-Type: text/html
Date: Sun, 28 May 2023 21:57:12 GMT
Set-Cookie: _yasc=vMof79jZkZMhjz5CC51NvTNAT5OfNY749kgZTKVp8PVXGVcDC32BNlROWDDc; domain=.yandex.net; path=/; expires=Wed, 25 May 2033 21:57:12 GMT; secure
pskovmuzmo.ucoz.ru/.s/t/291/3.jpg
200 OK 13 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/3.jpg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 400x155, components 3\012- data
Hash 8750b86a1982d0a01ab76633159a7033
4270d2ba5c114a6e9148cd1663ab06fb31e810d6
33cb7782e4cfba5efeee9f46a32fe22cd1f302d189f17c948c485452a408039a
GET /.s/t/291/3.jpg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/jpeg
Content-Length: 13407
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-345f"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/jquery.js
200 OK 68 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/jquery.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
Hash b54644e001018202e7861583c15ae16e
2f036d80ea16652fa72dfff9aa48964f17643695
8a86ff25a6f9231f24ac1a54450a8febed10b31663380baa067918b5a8befe8f
Analyzer Verdict Alert fortinet Malware
GET /jquery.js HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/javascript
Last-Modified: Sun, 27 Nov 2011 09:39:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"4ed20552-39fcd"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
pskovmuzmo.ucoz.ru/vchs.gif
200 OK 84 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/vchs.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 179 x 113\012- data
Hash 292cd893bac5938699136290ad725c8d
2048fd545360528fb52684e0cdb246524318a8e5
ffa35b99ee8a05ff049eae24c797293e1adde0b4c1baf2552a615d350c633599
GET /vchs.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 84125
Last-Modified: Sun, 06 Nov 2011 11:59:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4eb67695-1489d"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
pskovmuzmo.ucoz.ru/stat/1685311031890?01
302 Found 224 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/stat/1685311031890?01
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1e27e4494fe5fc54d58af71192a00580
a9c37d7c6aceceb9355b867d6ab0f2cb7c0a4395
6fd68a840d2006d73e0796982fe8b08377a843c1c459d78f8d3d8a273808ee76
Analyzer Verdict Alert fortinet Malware
GET /stat/1685311031890?01 HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 0pskovmuzmoucnid=WTlVw0lOFa; domain=pskovmuzmo.ucoz.ru; path=/stat/741206426; expires=Sun, 28-May-2023 21:57:15 GMT
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://pskovmuzmo.ucoz.ru/stat/741206426?11
pskovmuzmo.ucoz.ru/.s/t/291/4.gif
200 OK 328 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/4.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 6 x 36\012- data
Hash 369b4b6d9e495a5595c17021c545ec36
ea1feaeab2f304b815139dfd2bdc6beacd1cb041
19a0ef9596e3c798adb4ae87683aed83128b6f9c342a0ca865a31db346c9640f
GET /.s/t/291/4.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 328
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-148"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/t/291/5.gif
200 OK 85 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/5.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 18 x 18\012- data
Hash 44294fdf67bac608e70db298fcf5e2bb
9f2b740cd28434d2711a6c9d48db137e328bb466
36b2987d8c11cd813f995d53578652d9961fa5608feab51eae743bb63fe817a3
GET /.s/t/291/5.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 85
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-55"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/t/291/7.gif
200 OK 165 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/7.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 8 x 8\012- data
Hash 386a536761b0b403f348ebeec35f3a10
eda665876bc7df652eb400f39f151acaea9888e1
57aca0624b67be0ec0b8eedbbcc4f0c2bebb018bba813da048d437c6a1863708
GET /.s/t/291/7.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/css/291.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 165
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-a5"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/u.svg
200 OK 612 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/u.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 1e726893f02be39b70d24d502a3a9998
98c6fcf43a67426ed7e9c7a839e8115494ca8072
d0608cf0c4aff79f20a198427f7df73300d643face9bea72b8d406b432b84df9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/u.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 612
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-264"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/vk.svg
200 OK 772 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/vk.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7c4eb8cae0b565c023c4406add5f8041
079ce5d3277df672b57a73476a28d0bf0b1c1fe2
05a3f8587400860aa87bb18c9a9cd5b22a45ca4fc4a37a7922d29e48549b2fc9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/vk.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 772
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-304"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/wd/1/ar1.gif
200 OK 49 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/wd/1/ar1.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 4 x 7\012- data
Hash 4ed1ae998f20cab9a52ec899590999bb
5d5cde2a289304840005fbfb0f2825837e35c731
68c66290ff9cfdc3863623a3533b742ad62ce6045395a8460d7ca8a8a9d2ee8c
GET /.s/img/wd/1/ar1.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/css/291.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 49
Last-Modified: Wed, 05 Apr 2023 11:24:50 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "642d5a82-31"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/fb.svg
200 OK 611 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/fb.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash d178cc46dcbcf2b6f19445674fe3fe58
26f9747489d9e796926f7bbe11817c420afda3af
a9265d79c9ff74d4deeab5dce9643ed838018a6b4346605e002867858534f4bf
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/fb.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 611
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-263"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/ya.svg
200 OK 660 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/ya.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 7676c3eee5bd955efe08fd05367a443b
595e4e8dbf5ff472606434d0f45806d088de4c0c
b72d3f61ac56b4aa27bad5769589705004aff1f0ad341785ca72dc46ba16de5b
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/ya.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 660
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-294"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/gp.svg
200 OK 550 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/gp.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (534), with no line terminators
Hash 10d296226de121de55180e5b1b7d9d49
5980293f4f290734d09459d068a8c3996e43fe40
a657a4d5d05c6cd9b9f881ab6941e71f725c7eb451c9f37ceb514e45fdfd441d
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/gp.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 550
Last-Modified: Fri, 01 Feb 2019 12:57:26 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c544236-226"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/icon/social/ok.svg
200 OK 1.9 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/icon/social/ok.svg
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 08bbc2fa9b08463b0d061041d62b408e
370c53ccc3edd296cd35fb9e3de20dabfdae78d9
e1369586f1d82834ecc0ccab2f5f1a6f7565f2c715243d956bd7eb1404c8fba9
Analyzer Verdict Alert fortinet Malware
GET /.s/img/icon/social/ok.svg HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/social.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/svg+xml
Content-Length: 1858
Last-Modified: Mon, 26 Jun 2017 11:42:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5950f318-742"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/t/291/8.gif
200 OK 197 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/t/291/8.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 89a, 14 x 14\012- data
Hash bf817310ff1a751b2c1ed9897be8a21e
d99db2db1cd07b066eae5fc3000100eabff9acf9
82765150985b8f086ca199431a995f2a7046603349b7b4fae2edebb1c2d452f9
GET /.s/t/291/8.gif HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/.s/src/css/291.css
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Content-Length: 197
Last-Modified: Wed, 03 Dec 2014 12:38:29 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "547f0445-c5"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/.s/img/stars/3/12.png
200 OK 1.2 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/.s/img/stars/3/12.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type PNG image data, 12 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 350693463200bbe9388eec7d1a208289
9a310a7dd3c068636b224d253e0df9ce09784df2
aa22bfd07d6d73ee1e2fc304bf81625c716e83f81e1dfc044560b54595bdec28
GET /.s/img/stars/3/12.png HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/png
Content-Length: 1161
Last-Modified: Wed, 05 Apr 2023 11:24:43 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "642d5a7b-489"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
200 OK 798 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash bc3eba2b7d4644a639fe897081b999e5
c2d84e28fe5b54c3768e26956864c9529bb2b62a
582a8838a42c589bba5b6fc3f6a8e6a4604211b263bfbeacfa64a6801f71c5c7
Analyzer Verdict Alert fortinet Malware
GET /?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
gosuslugi.ru/common/img/banners/banner_pgu_245x97.gif
200 OK 8.9 kB URL GET HTTP/1.1 gosuslugi.ru/common/img/banners/banner_pgu_245x97.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.gosuslugi.ru
Fingerprint9C:BD:FD:1C:4E:BD:4D:FC:14:04:4E:4C:1B:C1:1A:FE:81:12:20:EA
ValidityThu, 01 Dec 2022 14:42:29 GMT - Tue, 02 Jan 2024 14:42:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2099)
Hash 04c4cdd5ff20b10547e232a4718694f9
41cdae1174fd539cae69668be7caeff2848932c6
fd7c129e501e8ca4a3f67237055522f4a4cf234e91ed214af042f1fefc3db0ab
GET /common/img/banners/banner_pgu_245x97.gif HTTP/1.1
Host: gosuslugi.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:12 GMT
Content-Type: text/html
Content-Length: 8947
Connection: keep-alive
Keep-Alive: timeout=10
Last-Modified: Fri, 04 Mar 2022 21:27:54 GMT
ETag: "6222845a-22f3"
Expires: Sun, 28 May 2023 21:57:11 GMT
Cache-Control: no-cache
Accept-Ranges: bytes
Strict-Transport-Security: max-age=16070400
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
info.weather.yandex.net/pskov/2.ru.png
404 Not Found 153 B URL GET HTTP/1.1 info.weather.yandex.net/pskov/2.ru.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subjectp.ya.ru
FingerprintAD:FD:4F:CF:4C:AC:B0:F4:51:C0:86:79:30:BA:19:61:17:55:EB:FA
ValidityWed, 29 Mar 2023 21:01:26 GMT - Sun, 10 Sep 2023 20:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /pskov/2.ru.png HTTP/1.1
Host: info.weather.yandex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Length: 153
Content-Type: text/html
Date: Sun, 28 May 2023 21:57:12 GMT
Set-Cookie: _yasc=LNitGQyVofhsRNr6Ty6xDIRz75C4ZGOz9a+AfmZxMylhQ4+Znb5U/RJMeXU=; domain=.yandex.net; path=/; expires=Wed, 25 May 2033 21:57:12 GMT; secure
pskovmuzmo.ucoz.ru/stat/741206426?11
200 OK 402 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/stat/741206426?11
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type GIF image data, version 87a, 88 x 31\012- data
Hash 3904989aa348a1e7bd32c7537d6720a3
969be1dbb29bd7a4cc8a7ada225c8a9d34281df4
48038357c58e4a27103354c15fbb3bc22773508a04346e8983c3343f7340567b
Analyzer Verdict Alert fortinet Malware
GET /stat/741206426?11 HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pskovmuzmo.ucoz.ru/
DNT: 1
Connection: keep-alive
Cookie: 0pskovmuzmoucnid=WTlVw0lOFa; 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ucvid=Cce7p3iMWZ; domain=ucoz.ru; path=/; expires=Mon, 27-May-2024 21:57:05 GMT
hdbcode.com/kkqahhd3.js
200 OK 11 kB IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
File type ASCII text, with very long lines (17724)
Hash eb0e4877fdc8cfe7055b2c4d1cf8b7f1
37c4635a7a0b7642cb97515d978a8059adea34d4
ba30315f7cc161dae48cccab5511f452e4572d28e0c8d2f8b653d5a2bdcd7ebf
GET /kkqahhd3.js HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:12 GMT
content-type: application/javascript
last-modified: Wed, 24 May 2023 13:21:34 GMT
vary: Accept-Encoding
etag: W/"646e0f5e-5af4"
content-encoding: gzip
X-Firefox-Spdy: h2
s31.ucoz.net/adv/dummy/000/img/ucoz-logo.png
200 OK 4.6 kB URL GET HTTP/1.1 s31.ucoz.net/adv/dummy/000/img/ucoz-logo.png
IP
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerGoGetSSL
Subject*.ucoz.net
Fingerprint9C:9F:0E:28:57:CD:A6:DE:BC:89:EA:60:7A:68:97:BB:58:9F:C1:4A
ValidityWed, 15 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash 14d37a3409afc2c450c62b97bc8019da
43fc12bf16a292d6d10b17ab7d1e37785288858c
fc4f998c5fcacc6cf161f1bedf46ec55e56273670ecce8b59e947b68d3c5bdb2
GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1
Host: s31.ucoz.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: image/png
Content-Length: 4585
Last-Modified: Tue, 26 Mar 2019 14:28:13 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36fd-11e9"
Accept-Ranges: bytes
hdbcode.com/b3aad1kk.js
200 OK 10 kB IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
File type gzip compressed data, from Unix\012- data
Hash de5c5fad691c15569feb754ef11bbed7
934dc242baadca6ff278490f7c7bb2ec997d341d
b000416a86ca8e076e97bc35445ff9b85350c34418779665567dae1320f9a933
GET /b3aad1kk.js HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:12 GMT
content-type: application/javascript
last-modified: Wed, 24 May 2023 13:21:34 GMT
vary: Accept-Encoding
etag: W/"646e0f5e-5af4"
content-encoding: gzip
X-Firefox-Spdy: h2
rot.spotsniper.ru/?src=ujs6&s_subid=btn
200 OK 1 B URL GET HTTP/1.1 rot.spotsniper.ru/?src=ujs6&s_subid=btn
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerLet's Encrypt
Subjectrot.spotsniper.ru
Fingerprint13:D8:07:73:18:96:DD:24:23:40:59:1D:77:25:1E:F0:00:59:B3:07
ValidityTue, 11 Apr 2023 04:45:34 GMT - Mon, 10 Jul 2023 04:45:33 GMT
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6&s_subid=btn HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:12 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
rot.spotsniper.ru/?src=ujs6
200 OK 1 B URL GET HTTP/1.1 rot.spotsniper.ru/?src=ujs6
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerLet's Encrypt
Subjectrot.spotsniper.ru
Fingerprint13:D8:07:73:18:96:DD:24:23:40:59:1D:77:25:1E:F0:00:59:B3:07
ValidityTue, 11 Apr 2023 04:45:34 GMT - Mon, 10 Jul 2023 04:45:33 GMT
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /?src=ujs6 HTTP/1.1
Host: rot.spotsniper.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:12 GMT
Content-Type: application/javascript
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
s.uuidksinc.net/match/1/?cb_url=https%3A%2F%2Fhdbcode.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent=
302 Found 0 B URL GET HTTP/2 s.uuidksinc.net/match/1/?cb_url=https%3A%2F%2Fhdbcode.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint09:56:40:57:03:64:6D:33:57:08:B2:D5:51:26:4E:27:92:16:13:A6
ValiditySat, 13 May 2023 23:22:41 GMT - Fri, 11 Aug 2023 23:22:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/1/?cb_url=https%3A%2F%2Fhdbcode.com%2Fsetuid%3F%5BUID%5D&gdpr=0&gdpr_consent= HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:12 GMT
content-length: 0
location: https://hdbcode.com/setuid?3kDwUzYoJJG1Dru72pN8
set-cookie: jcsuuid=3kDwUzYoJJG1Dru72pN8; expires=Mon, 27 May 2024 21:57:12 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
zcode12.me/?ze=grstanjtgu5ha3ddf4ztgobr
200 OK 188 B URL GET HTTP/2 zcode12.me/?ze=grstanjtgu5ha3ddf4ztgobr
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectzpgetcode12.com
Fingerprint5F:99:7D:06:EF:A3:4B:DF:58:6F:FA:B2:67:8F:88:83:2B:3A:45:F9
ValidityWed, 17 May 2023 02:42:23 GMT - Tue, 15 Aug 2023 02:42:22 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 09d8cd3c3126f965e2e6e257a2243fb5
e5bebf3f0a2dd0b8eb72c0f4c6aeb272c8c40eec
70e15a3bf7fd228b13458efa67cebdaf1efe393b5e1e6b54b540faebffe6d616
GET /?ze=grstanjtgu5ha3ddf4ztgobr HTTP/1.1
Host: zcode12.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 28 May 2023 21:57:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=ac4999f3-afc1-44b3-9dd9-55c77aaf99d9; expires=Tue, 27-Jun-2023 21:57:12 GMT; Max-Age=2592000; path=/; SameSite=None; domain=zcode12.me; secure
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash bce6f7183d3d9461ce90bcc847ad8ccc
0104c19e28533dde8611b4cd331a4cc264dadedc
b65629bca292e14574aac811a4dc049bfd7a3deb56f40e30f77c3236996a0867
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
200 OK 60 kB URL GET HTTP/2 themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A
ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Referer: https://s31.ucoz.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 60332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 21:34:27 GMT
expires: Sun, 26 May 2024 21:34:27 GMT
cache-control: public, max-age=31536000
age: 87765
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hdbcode.com/setuid?3kDwUzYoJJG1Dru72pN8
200 OK 74 B URL GET HTTP/2 hdbcode.com/setuid?3kDwUzYoJJG1Dru72pN8
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET /setuid?3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pskovmuzmo.ucoz.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:12 GMT
content-type: image/png
content-length: 74
set-cookie: dmpUid=3kDwUzYoJJG1Dru72pN8; expires=Tue, 28 May 2024 21:57:12 GMT; domain=hdbcode.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
s31.ucoz.net/adv/dummy/000/img/bg.gif
200 OK 1.3 kB URL GET HTTP/1.1 s31.ucoz.net/adv/dummy/000/img/bg.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerGoGetSSL
Subject*.ucoz.net
Fingerprint9C:9F:0E:28:57:CD:A6:DE:BC:89:EA:60:7A:68:97:BB:58:9F:C1:4A
ValidityWed, 15 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 485 x 3\012- data
Hash b19967d808ed7c42b41316d6c8474f55
18d80748bd4041b13a3373a429281ec65347a0e2
16c9962c4ecd52efc16d9d639d52fc60b9e427b6e454190d162f1aa1d220ad50
GET /adv/dummy/000/img/bg.gif HTTP/1.1
Host: s31.ucoz.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s31.ucoz.net/adv/dummy/000/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:06 GMT
Content-Type: image/gif
Content-Length: 1268
Last-Modified: Tue, 26 Mar 2019 14:28:13 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "5c9a36fd-4f4"
Accept-Ranges: bytes
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
ocsp.pki.goog/gts1c3
471 B IP
Hash e202444f49089fa6735f57e2f885afc1
b43c6fef9149614a86afb99c181201b13b33559e
69602a4c6fcac3fe2c73366b48d5998f803bd55e9ea83645e8dccdc2f1349fab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
200 OK 0 B URL OPTIONS HTTP/2 hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-length: 0
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: https://pskovmuzmo.ucoz.ru
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
pedsovet.su/knopki/pedsovet120.png
200 OK 17 kB URL GET HTTP/1.1 pedsovet.su/knopki/pedsovet120.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.pedsovet.su
Fingerprint2E:20:95:29:37:42:FB:DA:52:8E:0D:7F:A7:EB:2D:8E:03:EB:C9:11
ValidityThu, 30 Mar 2023 08:22:08 GMT - Tue, 30 Apr 2024 08:22:07 GMT
File type PNG image data, 120 x 60, 8-bit/color RGB, non-interlaced\012- data
Hash 919892ec6f6827a7702aa9ccc1ea3bee
565682f9ea456c2e691e02b32b85af044caa4bd7
50d2061136f2c8a1b1f25b68077e6e0249e21a2c68ce4c27c7b29550eda8cd3e
GET /knopki/pedsovet120.png HTTP/1.1
Host: pedsovet.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:15 GMT
Content-Type: image/png
Content-Length: 17295
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 28 Jul 2010 21:08:44 GMT
ETag: "4c509c5c-438f"
Expires: Sat, 17 Jun 2023 21:57:09 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322502&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
200 OK 0 B URL GET HTTP/2 hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322502&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322502&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-length: 0
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: https://pskovmuzmo.ucoz.ru
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:23 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
200 OK 60 kB URL GET HTTP/2 themes.googleusercontent.com/static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff
IP
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A
ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT
File type Web Open Font Format, TrueType, length 60332, version 1.1\012- data
Hash 0d6d6ae28614efe13ec053eaeef473c1
20cd1c419ba0763bb4bbb1435bc0aed00452af2e
5dfdd878d2d6bdd50f37fde1800a044753dd00bac3c3a30a35f999b422a48ee1
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Referer: https://s31.ucoz.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
timing-allow-origin: *
content-length: 60332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 21:34:27 GMT
expires: Sun, 26 May 2024 21:34:27 GMT
cache-control: public, max-age=31536000
age: 87766
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: font/woff
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 4195d3f97e59fc4f34d523d0195d8d0b
244cd9dd441c530c8e03405819eb759e95f25cb0
1fc6101023c68883ddf2cb7eb133e96a3e3cf96d7657223e38621f9fc9a7653d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
200 OK 3.9 kB URL OPTIONS HTTP/2 hdbcode.com/get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecthdbcode.com
Fingerprint51:23:D7:11:42:AD:E4:1F:10:65:0E:D2:3B:38:72:A0:B6:31:8C:0A
ValiditySat, 22 Apr 2023 00:51:24 GMT - Fri, 21 Jul 2023 00:51:23 GMT
File type gzip compressed data, from Unix\012- data
Hash 98dae6e1ca2193ed29058fb9131ee17c
52c4efa68ead5f7f3bed45784476c7485f982243
845d30c2bf9dc91b678b767bf7597b45573b6aa739bd45d23e128aac6febda1f
GET /get_data?v=default&page=https%253A%252F%252Fucoz.ru%252F&domain=pskovmuzmo.ucoz.ru&blockID=322613&width=814&height=3501&windowWidth=1280&gdpr=0&gdprConsent=&os=&osVersion=&limit=1&format=json&sspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd HTTP/1.1
Host: hdbcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Cookie: dmpUid=3kDwUzYoJJG1Dru72pN8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: https://pskovmuzmo.ucoz.ru
content-encoding: gzip
X-Firefox-Spdy: h2
s.viitjcfx.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==
200 OK 74 B URL GET HTTP/2 s.viitjcfx.com/w/1/ozihu72zijphw6lgpnyueyieorxx2ytrijcvkbsljnfgbqs4a7vgmwd4faducdbjpm2furckmyhhi3duj73kszsc7xrnneflr62zdolnpcp6zlvznj5es3sycjzawxrn6xbkhhegzhg32ui2yhgl72lig3wiji4tmqh2uq6ck4aev66c65huatt6duyz2ll7hk6eoodsgnxem3cqjnezcshnjne4msp73jnymtgzzb3ig4gp7czlo5nnkhz2qkl5qriv7vddy6hpk4ehjiodho3zaaiiu2hlobfnem3rzj4t7kcl3sn4n6civfqmlmha4bk2aq5ikhceywywaia7q53cgjzffvqxtf24irdpauma3ulv4pz7hcvsxwgkzskmtjdfpc3tcoyda4vkpjjjashkzwr5ctgdmj7vukzomauscqbruzhfxxcu7vynkykp3jyxtydtjplelif46rekc5fhu33vpocbv3ozd222yzjujahpme577ud33b2cl7scrzd5gtla25u7hvez5ncmgv7z3x6kzdgfzj35unx4zpbyzcvvsg4zgum3jxiupn2olrssgbqeazgbinyoduceamiqi5cuaca6jdvgwr6ekvfa====
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectviitjcfx.com
Fingerprint22:EE:EE:DE:30:A4:AD:B7:12:84:26:D1:D9:79:E1:CD:E1:51:D5:CB
ValiditySun, 21 May 2023 01:26:38 GMT - Sat, 19 Aug 2023 01:26:37 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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== HTTP/1.1
Host: s.viitjcfx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Slab&display=swap
200 OK 1.1 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto+Slab&display=swap
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type gzip compressed data, max compression\012- data
Hash 0d77f9d5d2107dc7640633ba57b1fc66
831a9cadfa6e3f79408c6e9a518efbf9297556a9
44e387e7ac08d34e37f4e601e31c13f308a56093aa54733495b4350306bb86bb
GET /css2?family=Roboto+Slab&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 28 May 2023 21:57:13 GMT
date: Sun, 28 May 2023 21:57:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uuidksinc.net/matchx?gdpr=0&gdpr_consent=
200 OK 1.9 kB URL GET HTTP/2 uuidksinc.net/matchx?gdpr=0&gdpr_consent=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint09:56:40:57:03:64:6D:33:57:08:B2:D5:51:26:4E:27:92:16:13:A6
ValiditySat, 13 May 2023 23:22:41 GMT - Fri, 11 Aug 2023 23:22:40 GMT
File type gzip compressed data, from Unix\012- data
Hash 0efdd5d90ad3af24ce7d3be61dd3e7c0
b076604f283f3b48a27c3df245bdaae822566028
a20c728b5f7acd0a33d8bfc4ce162248b7318b92002fb9717fb650e4eb0c99fa
GET /matchx?gdpr=0&gdpr_consent= HTTP/1.1
Host: uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: jcsuuid=3kDwUzYoJJG1Dru72pN8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
istoriyamuziki.narod.ru/button12.gif
301 Moved Permanently 178 B URL GET HTTP/1.1 istoriyamuziki.narod.ru/button12.gif
IP
ASN #204343 Compubyte Limited
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.narod.ru
Fingerprint80:90:C9:2E:08:30:49:68:10:4E:31:5C:F5:71:4E:1F:E2:A8:43:C2
ValidityMon, 30 May 2022 02:29:33 GMT - Sat, 01 Jul 2023 02:29:32 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /button12.gif HTTP/1.1
Host: istoriyamuziki.narod.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 28 May 2023 21:57:24 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Keep-Alive: timeout=15
Location: http://istoriyamuziki.narod.ru/button12.gif
ocsp.pki.goog/gts1c3
472 B IP
Hash 5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.cdnkimg.com/auto/200x150/image/tesr/2096/96/rect_64649bfe3ea2ft1684315134r4693.jpg
200 OK 18 kB URL GET HTTP/2 i.cdnkimg.com/auto/200x150/image/tesr/2096/96/rect_64649bfe3ea2ft1684315134r4693.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecti.cdnkimg.com
Fingerprint2D:D1:B7:BB:31:AF:3B:9F:A5:FF:0E:1E:ED:7D:71:44:B3:A1:CB:4F
ValidityWed, 29 Mar 2023 01:01:13 GMT - Tue, 27 Jun 2023 01:01:12 GMT
File type JPEG image data, baseline, precision 8, 200x150, components 3\012- data
Hash 9b0b977e5fb3e8d43904b47376d7e903
92743b19844d0632004c78571505632f9c68a267
c968f3351bef27ec83618ee624aa258ad2485c3b1e2a8084c62121ad75e76f77
GET /auto/200x150/image/tesr/2096/96/rect_64649bfe3ea2ft1684315134r4693.jpg HTTP/1.1
Host: i.cdnkimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/jpeg
content-length: 17636
server: nginx/1.23.2
cache-control: max-age=1209600
x-cache-status: HIT
expires: Sun, 11 Jun 2023 21:57:13 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=158&vid=3kDwUzYoJJG1Dru72pN8
204 No Content 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=158&vid=3kDwUzYoJJG1Dru72pN8
IP
ASN #58272 LeaderTelecom B.V.
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
FingerprintBC:E6:95:A6:22:29:B6:24:D7:E6:0C:34:42:6E:CB:21:F3:F3:B3:93
ValidityMon, 26 Sep 2022 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=158&vid=3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 28 May 2023 21:57:13 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=eb73563e2642edd57840; Expires=Mon, 27 May 2024 21:57:12 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 523
x-xss-protection: 1; mode=block
access-control-allow-origin: https://uuidksinc.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotoslab/v25/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2
200 OK 14 kB URL GET HTTP/2 fonts.gstatic.com/s/robotoslab/v25/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 14032, version 1.0\012- data
Hash 596946b804346c0f5b9109030e2d52e9
359ed67db1c2c9e3835bfc3c747aef5e4907af05
3aec4deab850f14ab4faf92a9997d07638e0160133a25cf52c196acb4da78f18
GET /s/robotoslab/v25/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 17:32:24 GMT
expires: Wed, 22 May 2024 17:32:24 GMT
cache-control: public, max-age=31536000
age: 447889
last-modified: Tue, 02 May 2023 17:01:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pskovmuzmo.ucoz.ru/gospoda-s_dnjom_uchitelja_vas-pljus.mp3
206 Partial Content 589 kB URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/gospoda-s_dnjom_uchitelja_vas-pljus.mp3
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Size 589 kB (589429 bytes)
Hash bce20169e4a7a9c45eaadea18bb2679c
b814ad379e9c85499c842623e91b7a69e24a967a
2b1a49bcdf401d327a921c337f810a77006cde4cbf1dfc6ce2053bae736f0cb2
Analyzer Verdict Alert fortinet Malware
GET /gospoda-s_dnjom_uchitelja_vas-pljus.mp3 HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
DNT: 1
Range: bytes=0-
Connection: keep-alive
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: audio/mpeg
Content-Length: 2491212
Last-Modified: Fri, 30 Sep 2011 19:59:20 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "4e861f98-26034c"
Expires: Sat, 17 Jun 2023 21:57:05 GMT
Cache-Control: max-age=1728000
X-Frame-Options: SAMEORIGIN
Content-Range: bytes 0-2491211/2491212
s.viitjcfx.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==?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
200 OK 74 B URL GET HTTP/2 s.viitjcfx.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==?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE}
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectviitjcfx.com
Fingerprint22:EE:EE:DE:30:A4:AD:B7:12:84:26:D1:D9:79:E1:CD:E1:51:D5:CB
ValiditySun, 21 May 2023 01:26:38 GMT - Sat, 19 Aug 2023 01:26:37 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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==?cur=${AUCTION_CURRENCY}&bid=${AUCTION_PRICE} HTTP/1.1
Host: s.viitjcfx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
s.viitjcfx.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==
200 OK 74 B URL GET HTTP/2 s.viitjcfx.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==
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectviitjcfx.com
Fingerprint22:EE:EE:DE:30:A4:AD:B7:12:84:26:D1:D9:79:E1:CD:E1:51:D5:CB
ValiditySun, 21 May 2023 01:26:38 GMT - Sat, 19 Aug 2023 01:26:37 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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== HTTP/1.1
Host: s.viitjcfx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash bb63f1caaf551e76a88f326c8db516ce
513533cccfb522767abf37082518f766adc3c070
cfe2e32528181d9ff75d3946d789811d6d2c71e153c39aa72c0a586b922ebeb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 28 May 2023 21:57:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rtb.com.ru/kadam-sync?uid=3kDwUzYoJJG1Dru72pN8
204 No Content 0 B URL GET HTTP/1.1 rtb.com.ru/kadam-sync?uid=3kDwUzYoJJG1Dru72pN8
IP
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectrtb.com.ru
Fingerprint26:DC:DF:B4:69:DD:5B:16:0E:2C:3C:AE:BC:80:EA:DD:04:E9:3F:A9
ValidityMon, 24 Apr 2023 04:02:08 GMT - Sun, 23 Jul 2023 04:02:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /kadam-sync?uid=3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: rtb.com.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Sun, 28 May 2023 21:57:13 GMT
Connection: keep-alive
Cache-Control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
P3p: CP="rtb.com.ru does not have a P3P policy"
dmpprof.com/matching/external/pixel.gif?sid=14&uid=3kDwUzYoJJG1Dru72pN8
200 OK 43 B URL GET HTTP/2 dmpprof.com/matching/external/pixel.gif?sid=14&uid=3kDwUzYoJJG1Dru72pN8
IP
ASN #12695 LLC Digital Network
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectdmpprof.com
FingerprintC3:8C:83:41:0D:B5:16:30:83:92:56:99:D6:A2:27:C9:43:A8:14:D3
ValiditySat, 20 May 2023 05:41:58 GMT - Fri, 18 Aug 2023 05:41:57 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /matching/external/pixel.gif?sid=14&uid=3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: dmpprof.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/gif
content-length: 43
last-modified: Sun, 28 May 2023 21:57:13 GMT
expires: Wed, 11 Nov 1998 11:11:11 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: nmatch=14_3kDwUzYoJJG1Dru72pN8; expires=Mon, 29 May 2023 09:57:13 GMT; path=/; secure; SameSite=None
uid=temp-91.90.42.154-; expires=Sun, 28 May 2023 23:57:13 GMT; path=/; secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, HEAD, PATCH, GET, POST, OPTIONS
access-control-allow-headers: Origin,Content-Type,Accept,Authorization,X-Requested-With, DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
dmpprof.com/matching/external/pixel.gif?sid=16&uid=3kDwUzYoJJG1Dru72pN8
200 OK 43 B URL GET HTTP/2 dmpprof.com/matching/external/pixel.gif?sid=16&uid=3kDwUzYoJJG1Dru72pN8
IP
ASN #12695 LLC Digital Network
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectdmpprof.com
FingerprintC3:8C:83:41:0D:B5:16:30:83:92:56:99:D6:A2:27:C9:43:A8:14:D3
ValiditySat, 20 May 2023 05:41:58 GMT - Fri, 18 Aug 2023 05:41:57 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /matching/external/pixel.gif?sid=16&uid=3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: dmpprof.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/gif
content-length: 43
last-modified: Sun, 28 May 2023 21:57:13 GMT
expires: Wed, 11 Nov 1998 11:11:11 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: nmatch=16_3kDwUzYoJJG1Dru72pN8; expires=Mon, 29 May 2023 09:57:13 GMT; path=/; secure; SameSite=None
uid=temp-91.90.42.154-; expires=Sun, 28 May 2023 23:57:13 GMT; path=/; secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, HEAD, PATCH, GET, POST, OPTIONS
access-control-allow-headers: Origin,Content-Type,Accept,Authorization,X-Requested-With, DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
pskovmuzmo.ucoz.ru/favicon.ico
200 OK 894 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/favicon.ico
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type MS Windows icon resource - 1 icon, 16x16\012- data
Hash a3a0510761359bcc2613a45c76546d42
c66b17eac9b5b07d4c3242448b079adc2949128e
e50d733849b9ff216b9cb7d884bffe006c908a71106455f7a25f297fce487f32
GET /favicon.ico HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Cookie: 0pskovmuzmouzll=1685311024; 0pskovmuzmopushi=1; kdSspUid=6544bd88-b2f1-4d48-96c2-76f38ba67edd; ucvid=Cce7p3iMWZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:07 GMT
Content-Type: image/x-icon
Content-Length: 894
Last-Modified: Wed, 25 Feb 2009 14:44:31 GMT
Connection: keep-alive
Keep-Alive: timeout=15
ETag: "49a5594f-37e"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__ru.js
200 OK 171 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__ru.js
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (1367)
Size 171 kB (170640 bytes)
Hash 15a5e05ff04226d134a08f74b1aa0c67
87157c0b16d6e5f31e60c67b80c41df86c4408ab
47f34de8c6386de3fa5870eae47631a3704fcda6cb173de071099e73ef4dd162
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__ru.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pskovmuzmo.ucoz.ru
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 170640
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 00:43:32 GMT
expires: Wed, 22 May 2024 00:43:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 508421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
939 B URL ocsp.globalsign.com/gseccovsslca2018
IP
Hash 964f535869141b4f75a0ba1df208a54c
fbfd15facdc2e12813090f0d801ea780cc2f91ee
17097736197a2ea3d609587b95941d2d91f2fa5bb1c035c327ad0e2bd4bb5673
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 28 May 2023 21:57:13 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Thu, 01 Jun 2023 20:20:35 GMT
ETag: "fbfd15facdc2e12813090f0d801ea780cc2f91ee"
Last-Modified: Sun, 28 May 2023 20:20:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 730
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ce9c08a1e061c0a-OSL
clck.yandex.ru/click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif
43 B URL clck.yandex.ru/click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ea05ec2274832731bf2413a6192a245d
d36405c92765acc00a3f0b73c02443927f439d2f
7e928161cd626935d39ff08188caa3f3a918811ca87194082dedf28b697ce6fd
GET /click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif HTTP/1.1
Host: clck.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 Ok
Cache-Control: no-cache
Connection: Keep-Alive
Content-Length: 43
Content-Type: image/gif
Set-Cookie: _yasc=f2ticGpjNTpA6kRzFAXBdEvvabVAbMX6QtIAz8CJceEZxzngYu3CkEmM3io/8QU=; domain=.yandex.ru; path=/; expires=Wed, 25 May 2033 21:57:13 GMT; secure
i=7uaqwUYQFBwJBpfxfoufO0Yn36y9JRL/fI0KC5v3zoHhk/KWscXfy3aaGTN5DO9VKJd01O2aat6K7Kdlw2TITX5VruA=; Expires=Tue, 27-May-2025 21:57:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9338531111685311033; Expires=Tue, 27-May-2025 21:57:13 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
200 OK 798 B URL GET HTTP/1.1 pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subject*.ucoz.ru
FingerprintB3:C4:38:E8:92:9F:57:D8:06:46:D8:C2:E1:0D:07:26:FE:0C:C4:49
ValiditySat, 18 Jun 2022 07:06:07 GMT - Thu, 20 Jul 2023 07:06:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash bc3eba2b7d4644a639fe897081b999e5
c2d84e28fe5b54c3768e26956864c9529bb2b62a
582a8838a42c589bba5b6fc3f6a8e6a4604211b263bfbeacfa64a6801f71c5c7
Analyzer Verdict Alert fortinet Malware
GET /?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo HTTP/1.1
Host: pskovmuzmo.ucoz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
orpheusmusic.ru/MUSIC23.gif
0 B URL GET orpheusmusic.ru/MUSIC23.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MUSIC23.gif HTTP/1.1
Host: orpheusmusic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
clck.yandex.ru/click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif
200 Ok 43 B URL GET HTTP/1.0 clck.yandex.ru/click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerGlobalSign nv-sa
Subjectclck.yandex.ru
FingerprintE1:4D:89:90:DF:63:49:A4:30:4A:B5:77:AF:03:3D:5C:D3:86:6A:B0
ValiditySun, 15 Jan 2023 21:00:58 GMT - Mon, 19 Jun 2023 20:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ea05ec2274832731bf2413a6192a245d
d36405c92765acc00a3f0b73c02443927f439d2f
7e928161cd626935d39ff08188caa3f3a918811ca87194082dedf28b697ce6fd
GET /click/dtype=stred/pid=7/cid=1227/*http://img.yandex.ru/i/pix.gif HTTP/1.1
Host: clck.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 Ok
Cache-Control: no-cache
Connection: Keep-Alive
Content-Length: 43
Content-Type: image/gif
Set-Cookie: _yasc=f2ticGpjNTpA6kRzFAXBdEvvabVAbMX6QtIAz8CJceEZxzngYu3CkEmM3io/8QU=; domain=.yandex.ru; path=/; expires=Wed, 25 May 2033 21:57:13 GMT; secure
i=7uaqwUYQFBwJBpfxfoufO0Yn36y9JRL/fI0KC5v3zoHhk/KWscXfy3aaGTN5DO9VKJd01O2aat6K7Kdlw2TITX5VruA=; Expires=Tue, 27-May-2025 21:57:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9338531111685311033; Expires=Tue, 27-May-2025 21:57:13 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
orpheusmusic.ru/MUSIC23.gif
0 B URL GET orpheusmusic.ru/MUSIC23.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MUSIC23.gif HTTP/1.1
Host: orpheusmusic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
match.ohmy.bid/cm?ssp=kadam
0 B URL GET match.ohmy.bid/cm?ssp=kadam
IP
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=kadam HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
z.cdn.adtarget.me/smc?s=22&u=3kDwUzYoJJG1Dru72pN8
204 No Content 0 B URL GET HTTP/2 z.cdn.adtarget.me/smc?s=22&u=3kDwUzYoJJG1Dru72pN8
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://uuidksinc.net/matchx?gdpr=0&gdpr_consent=
Certificate IssuerLet's Encrypt
Subjectadtarget.me
FingerprintEE:E8:65:F4:A7:24:2E:DF:FD:66:38:92:23:21:0F:FF:C6:FE:B9:E0
ValidityTue, 04 Apr 2023 23:11:40 GMT - Mon, 03 Jul 2023 23:11:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smc?s=22&u=3kDwUzYoJJG1Dru72pN8 HTTP/1.1
Host: z.cdn.adtarget.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uuidksinc.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sun, 28 May 2023 21:57:13 GMT
X-Firefox-Spdy: h2
www.nachalka.com/sites/default/files/b/65_shagov.gif
0 B URL GET www.nachalka.com/sites/default/files/b/65_shagov.gif
IP
Requested by https://pskovmuzmo.ucoz.ru/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sites/default/files/b/65_shagov.gif HTTP/1.1
Host: www.nachalka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
s31.ucoz.net/adv/dummy/000/css/style.css
200 OK 6.6 kB URL GET HTTP/1.1 s31.ucoz.net/adv/dummy/000/css/style.css
IP
Requested by https://pskovmuzmo.ucoz.ru/?a%21ZlbjyrnZuJIsuAsQEKFdeFpvcmZcnXPe6FUFgKAJJ5fQQrghmt0Ps9ewiMQWD6Hb1lGrvHnCpLMqUiAJN4GuzJ5woo
Certificate IssuerGoGetSSL
Subject*.ucoz.net
Fingerprint9C:9F:0E:28:57:CD:A6:DE:BC:89:EA:60:7A:68:97:BB:58:9F:C1:4A
ValidityWed, 15 Mar 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6856), with no line terminators
Hash 705315315dba74c186425b334741dad3
8c290432372efba4325f95fdc56f32a235e390c3
fcc74642fd5c3a6a23c038304e214ce141c9f0ec1451a7e06abf09a35a21dc42
GET /adv/dummy/000/css/style.css HTTP/1.1
Host: s31.ucoz.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 28 May 2023 21:57:05 GMT
Content-Type: text/css
Last-Modified: Tue, 26 Mar 2019 14:28:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
ETag: W/"5c9a36fd-19eb"
Content-Encoding: gzip
i.wmgtr.com/cim/VVrY3J3on-hEeTVpBfSCAW3rkyxWIRNy.png
0 B URL GET i.wmgtr.com/cim/VVrY3J3on-hEeTVpBfSCAW3rkyxWIRNy.png
IP
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjecti.wmgtr.com
Fingerprint7D:1B:65:9B:B8:35:3F:63:AA:D6:0E:B1:DB:13:80:AA:F0:55:75:FC
ValiditySun, 23 Apr 2023 23:02:02 GMT - Sat, 22 Jul 2023 23:02:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cim/VVrY3J3on-hEeTVpBfSCAW3rkyxWIRNy.png HTTP/1.1
Host: i.wmgtr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/png
server: nginx/1.19.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-option: nosniff
content-encoding: gzip
cache-control: max-age=82800
expires: Mon, 29 May 2023 20:57:13 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
s.viitjcfx.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====
200 OK 74 B URL GET HTTP/2 s.viitjcfx.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====
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://pskovmuzmo.ucoz.ru/
Certificate IssuerLet's Encrypt
Subjectviitjcfx.com
Fingerprint22:EE:EE:DE:30:A4:AD:B7:12:84:26:D1:D9:79:E1:CD:E1:51:D5:CB
ValiditySun, 21 May 2023 01:26:38 GMT - Sat, 19 Aug 2023 01:26:37 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e24e19b024c44b778301d880bd8e6f4
d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e
01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb
GET 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==== HTTP/1.1
Host: s.viitjcfx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pskovmuzmo.ucoz.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.2
date: Sun, 28 May 2023 21:57:13 GMT
content-type: image/png
content-length: 74
X-Firefox-Spdy: h2
195.216.243.31
213.174.157.151
0.0.0.0
185.177.93.30
185.98.54.153
31.172.81.159